CVE-2016-9139

https://notcve.org/view.php?id=CVE-2016-9139

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment. Vulnerabilidad de XSS en Open Ticket Request System (OTRS) 3.3.x en versiones anteriores a 3.3.16, 4.0.x en versiones anteriores a 4.0.19 y 5.0.x en versiones anteriores a 5.0.14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de un adjunto manipulado. • http://www.securityfocus.com/bid/94141 https://www.otrs.com/security-advisory-2016-02-security-update-otrs • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •