CVE-2026-48225

CVE-2026-48225 describes a reflected XSS in Open ISES Tickets prior to 3.44.2. The vulnerability occurs in landb.php via an unsanitized value passed to the _type POST parameter, injected into a hidden input value, enabling an authenticated attacker to inject arbitrary JavaScript that executes in ...