Zendesk: Admin Macro Description Stored XSS
A description field only available to account Administrators allowed for unexpected input which could be triggered to execute JavaScript if viewed by lower-level roles under certain circumstances. Thanks to @hariharan21 for their great work!...