Quest KACE Desktop Authority prior to 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.
quest kace desktop authority