Zammad Cross-Site Scripting Vulnerability (CNVD-2019-23066)

Zammad is a suite of ticket management software from the German company Zammad. A cross-site scripting vulnerability exists in Zammad 2.3.0 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...