Skip to content
OpenAdvisories

Product · Open ISES

Tickets

47 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • Medium 4.6
    CVE-2026-35013

    Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in street_view.php that allows authenticated attackers to inject arbitrary JavaScript by passing unsanitized values through the thelat and thelng GET parameters directly i…

    Open ISES Tickets
  • Medium 4.6
    CVE-2026-35012

    Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a h…

    Open ISES Tickets
  • Medium 4.6
    CVE-2026-35011

    Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_call GET parameter directly into page outpu…

    Open ISES Tickets
  • Medium 4.6
    CVE-2026-35010

    Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a Ja…

    Open ISES Tickets
  • Medium 4.6
    CVE-2026-35009

    Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_note.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidd…

    Open ISES Tickets
  • Medium 4.6
    CVE-2026-35008

    Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into an HTML …

    Open ISES Tickets
  • Medium 4.6
    CVE-2026-35007

    Open ISES Tickets < 3.44.2 Reflected XSS via single_unit.php id Parameter

    Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the id GET parameter directly into an HTML at…

    Open ISES Tickets