CVE-2023-46967

Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket...

CVE-2023-46967

Enhancesoft osTicket version 1.18.0 contains a Cross-Site Scripting (XSS) vulnerability within the sanitize function . This flaw allows a remote attacker to escalate privileges by submitting a crafted support ticket . While several sources confirm the existence of this vulnerability and its abili...