CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917: Improper Neutralization of Input During Web Page Generation

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

PT-2020-15856

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.3 Description The issue allows for XSS attacks through a crafted filename to the DraftAjaxAPI:: uploadInlineImage function in include/ajax.draft.php. Recommendations For versions prior to 1.14.3, update to versi...