SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field.
solarwinds web help desk 12.7.0