CVE-2021-21442

Publication date

2021-07-26 04:25:38

Family

OTRS

State

PUBLISHED

Description

In the project create screen its possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.