Test ID:	1.3.6.1.4.1.25623.1.0.143824
Category:	Web application abuses
Title:	osTicket < 1.12.6, 1.14.0 < 1.14.2 XSS Vulnerability
Summary:	osTicket is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: osTicket is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: include/class.sla.php in osTicket allows XSS via the SLA Name. Affected Software/OS: osTicket version 1.12.5 and prior and 1.14.0 - 1.14.1. Solution: Update to version 1.12.6, 1.14.2 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-12629 https://www.exploit-db.com/exploits/48413 https://github.com/osTicket/osTicket/compare/v1.14.1...v1.14.2 https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.