Description
In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion.
Remediation
References
Related Vulnerabilities
WordPress Plugin TAuto Poster includes Backdoor [Only if downloaded via the vendor website] (1.4.5)
Moodle CVE-2021-36402 Vulnerability (CVE-2021-36402)
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)
WordPress Plugin Exit Popup Show Cross-Site Scripting (1.0)
Wordpress Plugin Backup Migration Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-3977)