CVE-2026-35014 - Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter

Back Back to CVE browser

MEDIUM

Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter

Published May 20, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.29%

Description

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticket_id GET parameter directly into a hidden input field VALUE attribute. Attackers can craft a malicious URL containing a JavaScript payload in the ticket_id parameter that executes in the victim's browser when the URL is visited.

Affected products

Vendor Openises Product Tickets Default
affected
- Version
  0
  Status
  affected
  Constraints
  <3.44.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Openises

Tickets

affected

Version	Status	Constraints
0	affected	<3.44.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31184
Advisory
https://github.com/openises/tickets/commit/ecfeb406a016766cae81c749e14b5145a9f2dbff
patch
https://github.com/openises/tickets/releases/tag/v3.44.2
release-notes
https://www.vulncheck.com/advisories/open-ises-tickets-reflected-xss-via-routes-nm-php-ticket-id-parameter
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31184		Advisory
https://github.com/openises/tickets/commit/ecfeb406a016766cae81c749e14b5145a9f2dbff		patch
https://github.com/openises/tickets/releases/tag/v3.44.2		release-notes
https://www.vulncheck.com/advisories/open-ises-tickets-reflected-xss-via-routes-nm-php-ticket-id-parameter		third-party-advisory