Filtered by vendor Otrs Subscriptions
Filtered by product Survey Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-38057 1 Otrs 1 Survey 2024-11-21 4.1 Medium
An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects OTRS Survey module from 7.0.X before 7.0.32, from 8.0.X before 8.0.13 and ((OTRS)) Community Edition Survey module from 6.0.X through 6.0.22.
CVE-2021-21434 1 Otrs 1 Survey 2024-11-21 3.5 Low
Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions.