Description

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

Remediation

References

CVE-2023-1316

Related Vulnerabilities

TYPO3 Resource Management Errors Vulnerability (CVE-2013-1843)

ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9786)

Oracle HTTP Server Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2015-2808)

Joomla! Core 3.x.x Security Bypass (3.8.0 - 3.9.3)

LimeSurvey Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16187)

Severity

Medium

Classification

CVE-2023-1316 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities