CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 2CVE-2022-31889
https://notcve.org/view.php?id=CVE-2022-31889
05 Apr 2023 — Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae. • https://github.com/reewardius/CVE-2022-31889 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 2CVE-2022-31890
https://notcve.org/view.php?id=CVE-2022-31890
05 Apr 2023 — SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order parameter to the getOrder function. • https://github.com/reewardius/CVE-2022-31890 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •