{"id":"CVE-2019-11537","title":"In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can a…","summary":"In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can a…","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"enhancesoft","product":"osticket","affected":["osticket < 1.12"],"patched":["osticket 1.12"],"published":"2019-04-25","updated":"2026-07-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-11537","references":[{"url":"https://github.com/osTicket/osTicket/pull/4869","label":"cve@mitre.org"},{"url":"https://github.com/osTicket/osTicket/releases/tag/v1.12","label":"cve@mitre.org"},{"url":"https://pentest.com.tr/exploits/osTicket-v1-11-XSS-to-LFI.html","label":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/46753","label":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/46753/","label":"cve@mitre.org"},{"url":"https://github.com/osTicket/osTicket/pull/4869","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/osTicket/osTicket/releases/tag/v1.12","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://pentest.com.tr/exploits/osTicket-v1-11-XSS-to-LFI.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/46753","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/46753/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.04622,"epssPercentile":0.9128,"exploitAvailable":true,"ingestedAt":"2026-07-10T19:05:51.191Z","exploits":{"exploitdb":true,"checkedAt":"2026-09-23T07:13:15.649Z"},"slug":"CVE-2019-11537","body":"## Overview\n\nIn osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion.\n\n## Affected\n\n- `osticket < 1.12`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `osticket 1.12`","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0.9,"exploitation":12,"ransomware":0},"changes":[]}