CVE-2021-21434

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface i.e. another agent who wants to make changes in the survey. This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions...

CVE-2021-21434 XSS in Survey Module

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface i.e. another agent who wants to make changes in the survey. This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions...

CVE-2021-21434

CVE-2021-21434 is described across multiple sources as a cross-site scripting/code injection issue in the OTRS AG Survey product. The vulnerability allows a malicious survey to cause code execution in the agent interface, affecting OTRS AG Survey 6.0.x (6.0.20 and prior) and 7.0.x (7.0.19 and pri...