CVE-2020-10098

5.4 mediumEPSS 0.5%

Medium (5.4) in zammad zammad. EPSS 0.5% chance of exploitation in the next 30 days.

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Email functionality. The malicious JavaScript will execute within the browser of any user who opens the Ticket with the Article created from that Email.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zammad:zammad

References

https://zammad.com/news/security-advisory-zaa-2020-03
https://zammad.com/news/security-advisory-zaa-2020-03

Check your stack JSON