CVE-2026-35016— Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-35016
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter
Source: NVD (National Vulnerability Database)
Vulnerability Description
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm_query POST parameter directly into an HTML input field VALUE attribute. Attackers can craft a malicious request containing a JavaScript payload in the frm_query parameter that executes in the victim's browser when submitted.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-35016
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-35016
请登录查看更多情报信息。
Same Patch Batch · openises · 2026-05-20 · 10 CVEs total
| CVE-2026-35011 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_call Parameter |
| CVE-2026-35015 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter |
| CVE-2026-35012 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php ticket_id Parameter |
| CVE-2026-35007 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via single_unit.php id Parameter |
| CVE-2026-35009 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via add_note.php ticket_id Parameter |
| CVE-2026-35014 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter |
| CVE-2026-35013 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php thelat and thelng Parameters |
| CVE-2026-35010 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter |
| CVE-2026-35008 | 4.6 MEDIUM | Open ISES Tickets < 3.44.2 Reflected XSS via single.php ticket_id Parameter |
IV. Related Vulnerabilities
Same product: tickets
- CVE-2026-48249
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verifica - CVE-2026-48248
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verifica - CVE-2026-48247
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verifica - CVE-2026-48246
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verifica - CVE-2026-48245
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in
Same vendor: openises
- CVE-2026-35015
Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.ph - CVE-2026-35014
Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php t - CVE-2026-35013
Open ISES Tickets < 3.44.2 Reflected XSS via street_view.php - CVE-2026-35012
Open ISES Tickets < 3.44.2 Reflected XSS via add_facnote.php - CVE-2026-35011
Open ISES Tickets < 3.44.2 Reflected XSS via opena.php frm_c
Same weakness: CWE-79
- CVE-2026-8203
Concrete CMS 9.5.0 and below has Stored XSS on the height pa - CVE-2026-8197
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via - CVE-2026-48230
Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_impo - CVE-2026-48229
Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ti - CVE-2026-48228
Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php i
V. Comments for CVE-2026-35016
No comments yet