CVE-2020-12629: Enhancesoft Osticket

Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days.

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

Affected products

• Enhancesoft Osticket: before 1.14.2 (fixed in 1.14.2)

Published 2020-05-04. Last modified 2026-06-17.