medium6.1
CVE-2023-46967
Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted suppor…
Impact
Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enhancesoft | Osticket | before 1.18.0 |