XSS vulnerability in SD+

XSS vulnerability in SD+

Arbitrary HTML content (including script tags) can be entered into a ticket. Impact is attacker can gain complete control over Service Desk.