Security osTicket 1.9.4 Cross Site Scripting January 22, 2015 007admin osTicket version 1.9.4 suffers from a cross site scripting vulnerability.