CVE-2021-35303

MEDIUM CVSS: 6.1 Published: 2021-06-28 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.

Affected Platforms

Zammad Zammad

Weakness Type

CWE-79

References