PT-2017-14022

Name of the Vulnerable Software and Affected Versions osTicket version 1.10.1 Description The issue allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link. This can lead to session ID and data theft, bypassing CSRF protections, a...