{"id":"CVE-2018-7193","title":"Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the \"order\" parameter.","summary":"Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the \"order\" parameter.","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"enhancesoft","product":"osticket","affected":["osticket <= 1.10.1"],"published":"2018-03-27","updated":"2026-07-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2018-7193","references":[{"url":"https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c","label":"cve@mitre.org"},{"url":"https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.02418,"epssPercentile":0.83434,"ingestedAt":"2026-07-10T19:05:51.162Z","exploits":{"nuclei":["CVE-2018-7193"],"checkedAt":"2026-09-23T07:13:15.412Z"},"exploitAvailable":true,"slug":"CVE-2018-7193","body":"## Overview\n\nCross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the \"order\" parameter.\n\n## Affected\n\n- `osticket <= 1.10.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0.5,"exploitation":12,"ransomware":0},"changes":[{"seq":4449,"id":"CVE-2018-7193","ts":1788887180705,"field":"exploit_available","old":"false","new":"true"},{"seq":3332,"id":"CVE-2018-7193","ts":1788886299687,"field":"exploit_available","old":"true","new":"false"},{"seq":2187,"id":"CVE-2018-7193","ts":1788882969402,"field":"exploit_available","old":"false","new":"true"},{"seq":1216,"id":"CVE-2018-7193","ts":1788882374002,"field":"exploit_available","old":"true","new":"false"},{"seq":330,"id":"CVE-2018-7193","ts":1788881815707,"field":"exploit_available","old":"false","new":"true"}]}