CVE-2026-111048 | FOSSBilling up to 0.8.8 Admin Ticket List Rendering mod_support_tickets.html.twig note cross site scripting

A vulnerability was found in FOSSBilling up to 0.8.8. It has been rated as problematic. Affected by this issue is some unknown functionality of the file src/modules/Support/templates/admin/mod_support_tickets.html.twig of the component Admin Ticket List Rendering. The manipulation of the argument note leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-111048. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More