CVE-2023-1319 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

PT-2023-16890 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osticket versions prior to 1.16.6 Description: The issue is related to Cross-site Scripting XSS - Generic. This is a type of security vulnerability that occurs when an application includes user input in its output without proper validation or...

CVE-2023-1317

CVE-2023-1317 describes a reflected XSS in osTicket (osticket/osticket) prior to version 1.16.6. The visible impact is that an attacker could cause arbitrary JavaScript to run in a victim’s browser, potentially leading to data theft or unauthorized actions within the user session. The CVE is docu...

CVE-2023-1315: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1317 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1320 Cross-site Scripting (XSS) - Stored in osticket/osticket

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

CVE-2023-1316

CVE-2023-1316 is a stored XSS vulnerability in osticket/osticket prior to v1.16.6. Multiple connected sources corroborate that the issue affects osticket/osticket by storing malicious scripts (notably via an email field) and potentially allows data disclosure or scripting in affected sessions. Th...

CVE-2023-1316: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository osticket/osticket prior to v1.16.6...

Multiple XSS Vulnerabilities in Queue Condition

Description Cross-Site Scripting XSS vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScript code...

osTicket < 1.16.4 XSS Vulnerability

osTicket is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

CVE-2022-4271

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

PT-2022-26513 · Osticket · Osticket

Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.16.4 Description: The issue is related to Cross-site Scripting XSS - Reflected, which was found in the GitHub repository osticket/osticket. Recommendations: For versions prior to 1.16.4, update to version 1.16.4 o...

CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

CVE-2022-4271: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A security vulnerability exists in Enhancesoft osTicket versions prior to 1.16.4. The vulnerability stems from setting an ordinary user's username as the XSS payload, and then placing the same XSS...

CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

CVE-2022-4271

osTicket (osticket/osticket)

CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

CVE-2022-32074

A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...