Description include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. Remediation References CVE-2020-12629 Related Vulnerabilities Joomla! Core 2.5.x Arbitrary File Upload (2.5.0 - 2.5.13) WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.34) Oracle Database Server CVE-2011-0875 Vulnerability (CVE-2011-0875) WordPress Plugin ACF:Better Search SQL Injection (2.0.2) WordPress Plugin SEO Ultimate Cross-Site Scripting (7.6.5.2) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2020-12629