Vulnerabilities (CVE)

Filtered by vendor Enhancesoft Subscribe
Filtered by product Audit Log
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31889 1 Enhancesoft 1 Audit Log 2023-12-10 N/A 6.1 MEDIUM
Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae.
CVE-2022-31890 1 Enhancesoft 1 Audit Log 2023-12-10 N/A 9.8 CRITICAL
SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order parameter to the getOrder function.