cross site scripting

hitha

osticket/upload/scp/index.php
osticket/upload/scp/settings.php
osticket/upload/scp/admin.php
osticket/upload/scp/dashboard.php
osticket/upload/scp/directory.php
osticket/upload/scp/kb.php
osticket/upload/scp/profile.php
osticket/upload/scp/settings.php
osticket/upload/scp/tickets.php
osticket/upload/scp/

KevinTheJedi

@hitha

Please create a valid POC and submit it to the security team.

Cheers.

ntozier

You would want to report replicable security concerns to the Devs directly along with documentation of the issue, and your proof that it is an issue.
https://github.com/osTicket/osTicket/blob/develop/SECURITY.md