Description

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.

Remediation

References

CVE-2022-4271

Related Vulnerabilities

MySQL CVE-2022-21378 Vulnerability (CVE-2022-21378)

PHP Improper Input Validation Vulnerability (CVE-2016-4072)

WebLogic CVE-2020-2551 Vulnerability (CVE-2020-2551)

WordPress Plugin Drag & Drop File Uploader 'dnd-upload.php' Arbitrary File Upload (0.1)

WordPress Plugin Ultimate GDPR & CCPA Compliance Toolkit for WordPress Security Bypass (2.4)

Severity

Medium

Classification

CVE-2022-4271 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities