Description
Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the status parameter in a search action.
Unscored
CVE-2015-1176
EUVD-2015-1318GHSA-3h95-q6m8-947m
Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web…
Published Jan 23, 2015 · Updated Aug 6, 2024 · Assigned by mitre