CVE-2020-10103

The CVE-2020-10103 issue affects Zammad versions 3.0 through 3.2 and is an XSS vulnerability exploitable via the File Upload feature. A low-privileged user can supply malicious JavaScript in an uploaded file, which will execute in the browsers of users with an active Zammad session when they clic...