PT-2026-42257

Name of the Vulnerable Software and Affected Versions Open ISES Tickets versions prior to 3.44.2 Description A reflected cross-site scripting issue exists in the 'do unit mail.php' endpoint. Authenticated attackers can inject arbitrary JavaScript by providing an unsanitized value through the the...