CVE-2018-7192 | BDVDB-2026-98388 Detail

Description#

Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c

Exploit#

No public exploit known

History#

Version 12018-03-27Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.