Design/Logic Flaw

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...