EIP-2026-110403

This is a working proof-of-concept for a persistent XSS vulnerability in osTicket 1.14.1. The exploit demonstrates how an attacker can inject malicious JavaScript into the 'queue-name' parameter, which is then stored and executed when the ticket queue is viewed.