CVE-2012-4600

This Python script demonstrates a stored XSS vulnerability in OTRS 3.1.8 and 3.1.9 by sending an email with a malicious payload that bypasses input validation. The payload uses obfuscated script tags to execute arbitrary JavaScript in the context of the victim's browser.

This Python script demonstrates a stored XSS vulnerability in OTRS by sending an email with a malicious iframe payload. The exploit leverages the HTML email rendering feature to execute arbitrary JavaScript in the context of the victim's browser.