| Package | Affected versions | Patched versions |
|---|---|---|
| osticket | = 1.14.2 |
scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free