SysAid Help Desk prior to 22.1.65 allows XSS in the Password Services module, aka FR# 67241.
sysaid help desk