Unrated
An issue was discovered in Zammad before 4.1.1. Stored XSS may occur via an Article during addition of an attachment to a Ticket.
CVE-2021-42092
First seen on SecPulse
References
- advisory zammad.com