CVE-2013-2637

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items…

published February 12, 2020

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04305 · 91.1th percentile
Published
2020-02-12T16:07Z
EPSS history
Timeline
  • 12 FEB 16:07Z
    A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items…
    cvelistv5