Description
Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file extension while creating a support ticket.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Photo Gallery by Gallery Bank Cross-Site Scripting (3.0.228)
WordPress Plugin GiveWP-Donation and Fundraising Platform PHP Object Injection (2.3.0)
MySQL CVE-2018-2590 Vulnerability (CVE-2018-2590)
MySQL CVE-2018-2565 Vulnerability (CVE-2018-2565)
WordPress Plugin Convert Plus Unspecified Vulnerability (3.5.6)