Description

Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.

Remediation

References

CVE-2010-0606

Related Vulnerabilities

WordPress Plugin Google XML Sitemaps Cross-Site Scripting (4.0.8)

Atlassian Jira CVE-2020-14178 Vulnerability (CVE-2020-14178)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0213)

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Scripting (2.2.7)

WordPress Plugin Post Lists View Custom Cross-Site Scripting (1.7.1)

Severity

Low

Classification

CVE-2010-0606 CWE-707

Tags

Missing Update Known Vulnerabilities