wid-sec-w-2026-0826
·
Published 2026-03-23
·
View on BSI CERT-Bund ↗
Znuny: Vulnerability allows Cross-Site Scripting
CVSS 6.1
MEDIUM
Risk Summary
A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter
CVEs (1)
Affected Vendors
Znuny
Affected Products (4)
Znuny
·
Znuny
LTS <6.5.19
Znuny
·
Znuny
LTS 6.5.19
Znuny
·
Znuny
<7.3.1
Znuny
·
Znuny
7.3.1
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more