← Back to CVE List

CVE-2020-16193

Published: 2020-08-26T12:15Z
Last Modified: 2024-11-21T05:06Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt