Lucene search
MitreCVELIST:CVE-2023-27149HistoryOct 23, 2023 - 12:00 a.m.
CVE-2023-27149
2023-10-2300:00:00
mitre
www.cve.org
3
enhancesoft osticket
stored xss
cross-site scripting
arbitrary web scripts
html
custom list
payload injection
EPSS
0.001
Percentile
20.8%
A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list.
Related
osv
osv
CVE-2023-27149
2023-10-23 20:15:08
prion
prion
Cross site scripting
2023-10-23 20:15:00
vulnrichment
vulnrichment
CVE-2023-27149
2023-10-23 00:00:00
cve
cve
CVE-2023-27149
2023-10-23 20:15:08
nvd
nvd
CVE-2023-27149
2023-10-23 20:15:08