Security osTicket 1.9.4 Cross Site Scripting January 22, 2015 007admin Leave a comment osTicket version 1.9.4 suffers from a cross site scripting vulnerability.