Description

Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Remediation

References

CVE-2015-1347

Related Vulnerabilities

ownCloud Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2015-3013)

WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Cross-Site Scripting (3.1.14)

Ruby Cryptographic Issues Vulnerability (CVE-2013-4363)

WordPress Plugin Ajax Plugin Helper Cross-Site Scripting (1.0.5)

Oracle JRE Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0422)

Severity

Medium

Classification

CVE-2015-1347 CWE-707

Tags

Missing Update Known Vulnerabilities