Description
scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent.
Remediation
References
Related Vulnerabilities
Magento Improper Input Validation Vulnerability (CVE-2019-7898)
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-44528)
WordPress Plugin Monarch Social Sharing Security Bypass (1.2.6)
WordPress Plugin Events Manager Multiple Vulnerabilities (5.9.7.3)
Django Improper Input Validation Vulnerability (CVE-2010-4535)