CoreCVE
Back

MEDIUM

Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter

Published Jan 23, 2015

Description

Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 23, 2015
Updated Sep 17, 2024
Reserved Jan 23, 2015
Link CVE-2015-1347
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jul 10, 2026
Link CVE-2015-1347
Red Hat
Severity n/a
Public date n/a
Links CVE-2015-1347
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a