PT-2019-12361

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.12 Description The issue exists due to the possibility of XSS via several API endpoints, including "/upload/file.php", "/upload/scp/users.php?do=import-users", and "/upload/scp/ajax.php/users/import", when an agent...