CVE-2020-16193
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
An XSS vulnerability in osTicket before version 1.14.3 exists due to missing input validation in include/staff/banrule.inc.php, where the echo statement outputs $info['notes'] without sanitization. An attacker can inject malicious JavaScript code that executes in other users' browsers.
Risk Assessment
The risk includes session theft, admin account takeover, or unauthorized actions within the help desk system, potentially leading to data leakage or system integrity compromise.
Recommendation
Immediately upgrade osTicket to version 1.14.3 or later, which includes a fix for the XSS vulnerability. Additionally, implement input filtering and output encoding for all data displayed in the interface.
Original NVD description (English source)
osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call.