CVE-2023-27149

Name of the Vulnerable Software and Affected Versions Enhancesoft osTicket version 1.17.2

Description A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list.

Recommendations For version 1.17.2, consider disabling the custom list update feature until a patch is available to prevent exploitation of the stored XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.