2021-10-07 19:36:50
mitre
PUBLISHED
An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.