Medium severity5.4NVD Advisory· Published Jul 13, 2022· Updated Jul 10, 2026

CVE-2022-32074

Description

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Osticket/Osticket2 versions
cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:enhancesoft:osticket:*:*:*:*:*:*:*:*range: <2022-05-19
- (no CPE)range: < a7842d494889fd5533d13deb3c6a7789768795ae
osTicket-plugins/Storage-FSdescription

Patches

Vulnerability mechanics

References

github.com/osTicket/osTicket-plugins/commit/a7842d494889fd5533d13deb3c6a7789768795aenvdPatchThird Party Advisory
owasp.org/www-community/attacks/xss/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000