Description
Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Prayer Multiple Cross-Site Request Forgery Vulnerabilities (1.6.5)
GlassFish CVE-2012-0104 Vulnerability (CVE-2012-0104)
MySQL CVE-2020-2768 Vulnerability (CVE-2020-2768)
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Request Forgery (3.5.1.0)
Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)