748 matches found
WordPress osTicket WP Bridge plugin <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin osTicket WP Bridge versions = 1.9.2...
CVE-2025-9882: Cross-Site Request Forgery (CSRF)
The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...
PT-2025-38634
Name of the Vulnerable Software and Affected Versions osTicket WP Bridge versions up to and including 1.9.2 Description The osTicket WP Bridge plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on a function. This allows unauthenticated...
WordPress plugin osTicket WP Bridge 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2025-45387
The open-source support work order system osTicket is vulnerable to a Broken Access Control vulnerability in the /scp/ajax.php endpoint. This flaw exists in versions prior to v1.17.6 and prior to v1.18.2 , potentially leading to an elevation of privilege . To remediate this, users should update t...
osTicket 跨站脚本漏洞
osTicket is a widely used and trusted open source support work order system from osTicket. A security vulnerability exists in osTicket versions prior to 1.18.2 that stems from improper access control in /scp/ajax.php, which could lead to elevation of privilege...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2025-45387: Improper Neutralization of Input During Web Page Generation
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
PT-2025-23544 · Osticket · Osticket
Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.17.6 and prior to 1.18.2 Description: The issue is related to a Broken Access Control Vulnerability in the /scp/ajax.php endpoint. This vulnerability affects osTicket versions prior to 1.17.6 and prior to 1.18.2...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2024-21728
An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky osTicket Bridge by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return paramete...
CVE-2023-46967
Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket...
CVE-2023-27149
A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...
CVE-2023-1319
Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...
CVE-2023-1317
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...