CVE-2023-38057

CVE-2023-38057 affects OTRS Survey modules: 7.0.x prior to 7.0.32, 8.0.x prior to 8.0.13, and the ((OTRS)) Community Edition Survey module from 6.0.x through 6.0.22. The vulnerability is caused by improper input validation in the survey module, allowing an attacker who has a link to a valid, unan...

CVE-2021-21434

CVE-2021-21434 is described across multiple sources as a cross-site scripting/code injection issue in the OTRS AG Survey product. The vulnerability allows a malicious survey to cause code execution in the agent interface, affecting OTRS AG Survey 6.0.x (6.0.20 and prior) and 7.0.x (7.0.19 and pri...