SysAid Help Desk prior to 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.
sysaid help desk