osTicket 跨站脚本漏洞

osTicket is a widely used and trusted open source support work order system from osTicket. A security vulnerability exists in osTicket versions prior to 1.18.2 that stems from improper access control in /scp/ajax.php, which could lead to elevation of privilege...