CVE-2020-12629
include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.
- Affected products
- Osticket
- Enhancesoft Osticket
- < 1.14.2
- Fix
- Available
- CVSS 3.1
- 5.4 MEDIUM
- EPSS
- 1.5% (73th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2020-05-04
CVE-2020-12629 at NVD
1 known exploit for CVE-2020-12629
Proof-of-concept code and exploit modules indexed by Sploitus