3 matches found
CVE-2020-12629
include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name...
5.4CVSS0.01504EPSS
SaveExploits1References3
PT-2020-13174
Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.2 Description The issue allows for XSS via the SLA Name in the include/class.sla.php file. Recommendations For versions prior to 1.14.2, update to version 1.14.2 or later to resolve the issue...
5.4CVSS0.01504EPSS
SaveExploits1References7
20