CVE-2022-31889

MEDIUM

osTicket audit_log < 2022-04-21 - Stored Cross-Site Scripting in auditlogs.tmpl.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-31889. PoCs published by reewardius.

AI-analyzed exploit summary This repository contains a proof-of-concept for a reflected XSS vulnerability in osTicket's audit log page. The exploit leverages improper input sanitization in the 'type' parameter to inject arbitrary JavaScript code.

Description

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae.

Exploits (1)

nomisec WORKING POC
by reewardius · poc
https://github.com/reewardius/CVE-2022-31889

This repository contains a proof-of-concept for a reflected XSS vulnerability in osTicket's audit log page. The exploit leverages improper input sanitization in the 'type' parameter to inject arbitrary JavaScript code.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: osTicket (version not specified)
Auth required
Prerequisites: Access to the osTicket support portal · Valid session or authentication credentials
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 6.1
EPSS 0.0065
EPSS Percentile 46.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
enhancesoft/audit_log < 2022-04-21
Published Apr 05, 2023
Tracked Since Feb 18, 2026