What is GHSA-x238-8qx9-7hh7?

GHSA-x238-8qx9-7hh7 is a security advisory published by GitHub Security Advisories with Medium severity. An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page,...

Which CVE IDs does GHSA-x238-8qx9-7hh7 cover?

GHSA-x238-8qx9-7hh7 covers the following CVE IDs: CVE-2026-48212. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x238-8qx9-7hh7?

GHSA-x238-8qx9-7hh7 has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

GHSA-x238-8qx9-7hh7MediumCVSS 4.8

An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page,...

Vendor

GitHub Security Advisories

Published

October 12, 2026

Last Modified

October 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-48212 →

📋 Description

An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of users accessing that page.

This issue affects OTRS:

7.0.X
8.0.X
2023.X
2024.X
2025.X
2026.X before 2026.7.X

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-48212
https://otrs.com/release-notes/otrs-security-advisory-2026-11
https://github.com/advisories/GHSA-x238-8qx9-7hh7