← All advisories

Medium severity5.4NVD Advisory· Published May 4, 2020· Updated Jun 17, 2026

CVE-2020-12629

CVE-2020-12629

Description

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Osticket/Osticket2 versions
cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*range: <1.14.2
- (no CPE)range: <1.14.2
osTicket/osTicketdescription

Patches

Vulnerability mechanics

References

3

github.com/osTicket/osTicket/compare/v1.14.1...v1.14.2nvdPatchThird Party Advisory
github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884nvdPatchThird Party Advisory
www.exploit-db.com/exploits/48413nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.