CVE-2018-7193

NONE EPSS 82.6%

Published Mar 27, 20188y ago · Modified Jun 17, 20262w ago

Published Mar 27, 2018 8y ago

Last Modified Jun 17, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter.

Threat Intelligence

EPSS Exploit Probability

82.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
osticket	osticket	*	≤1.10.1

References 1

blog.securityevaluators.com https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c

ExploitTechnical DescriptionThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.