osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.

Published Aug 30, 2020 · Updated Aug 4, 2024 · Assigned by mitre