{"id":"CVE-2026-48212","state":"PUBLISHED","title":"Stored XSS in external pages","description":"An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of users accessing that page.\n\nThis issue affects OTRS:\n\n  *  7.0.X\n  *  8.0.X\n  *  2023.X\n  *  2024.X\n  *  2025.X\n  *  2026.X before 2026.7.X","publishedAt":"2026-10-12T06:48:50.387Z","updatedAt":"2026-10-15T18:07:57.247Z","severity":{"score":4.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","source":"OTRS"},"assigner":"OTRS","products":["OTRS GmbH (former OTRS AG) OTRS"],"affected":[{"vendor":"OTRS GmbH (former OTRS AG)","product":"OTRS","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected"},{"version":"2025.x","status":"affected"},{"version":"2026.x","status":"affected","lessThanOrEqual":"2026.6.x","versionType":"patch"}],"modules":["External Interface"]}],"references":["https://otrs.com/release-notes/otrs-security-advisory-2026-11/"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T20:12:07.131Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/48xxx/CVE-2026-48212.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-48212","state":"PUBLISHED","datePublished":"2026-10-12T06:48:50.387Z","dateUpdated":"2026-10-15T18:07:57.247Z","assignerShortName":"OTRS","assignerOrgId":"2e1bf29f-dc29-4ed8-830c-7b9348b6f0e8","dateReserved":"2026-05-21T12:12:49.646Z"},"containers":{"cna":{"title":"Stored XSS in external pages","descriptions":[{"lang":"en","value":"An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of users accessing that page.\n\nThis issue affects OTRS:\n\n  *  7.0.X\n  *  8.0.X\n  *  2023.X\n  *  2024.X\n  *  2025.X\n  *  2026.X before 2026.7.X"}],"affected":[{"vendor":"OTRS GmbH (former OTRS AG)","product":"OTRS","defaultStatus":"affected","versions":[{"version":"7.0.x","status":"affected"},{"version":"8.0.x","status":"affected"},{"version":"2023.x","status":"affected"},{"version":"2024.x","status":"affected"},{"version":"2025.x","status":"affected"},{"version":"2026.x","status":"affected","lessThanOrEqual":"2026.6.x","versionType":"patch"}],"modules":["External Interface"]}],"references":[{"url":"https://otrs.com/release-notes/otrs-security-advisory-2026-11/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OTRS","orgId":"2e1bf29f-dc29-4ed8-830c-7b9348b6f0e8","dateUpdated":"2026-10-12T06:48:50.387Z"},"credits":[{"lang":"en","type":"reporter","value":"Special thanks to William Bastos (@chor4o) and Samara Gama (igobysamy) for reporting this vulnerability"}],"datePublic":"2026-10-12T07:00:00.000Z","impacts":[{"capecId":"CAPEC-592","descriptions":[{"lang":"en","value":"CAPEC-592 Stored XSS"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update to latest version of OTRS (2026.7.1. or later). Please note that there will be no OTRS 7 patches<br>"}],"value":"Update to latest version of OTRS (2026.7.1. or later). Please note that there will be no OTRS 7 patches"}],"source":{"advisory":"OSA-2026-11","defect":["SecOPS#2026062210000078","Issue#5090"],"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-15T17:51:34.895193Z","id":"CVE-2026-48212","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-15T18:07:57.247Z"}}]}}}