Description

Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter.

Remediation

References

CVE-2018-7192

Related Vulnerabilities

WordPress Plugin eShop Multiple Cross-Site Scripting Vulnerabilities (6.2.8)

WordPress Plugin MapPress Maps for WordPress Security Bypass (2.54.5)

WordPress Plugin WP Mobile Detector Unspecified Vulnerability (2.1)

WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.1.9)

WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-7192