2020-08-26 12:00:17
mitre
PUBLISHED
osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info[notes] call.