Enhancesoft Audit Log — known CVE vulnerabilities

Every CVE whose affected-product data names Enhancesoft Audit Log, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-31890 — CVSS 9.8 (critical): SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae…
• CVE-2022-31889 — CVSS 6.1 (medium): Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit…