An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket.

Published Dec 28, 2020 · Updated Aug 4, 2024 · Assigned by mitre