CVE-2020-12629

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name

published May 4, 2020

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01504 · 74.1th percentile
Published
2020-05-04T12:28Z
EPSS history
Timeline
  • 04 MAY 12:28Z
    include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name
    cvelistv5