ZSA-2019-10
Agents and customer users can create articles containing malicious JavaScript
Problem
Agents and customer users logged in to OTRS can create articles that contain malicious JavaScript which will be executed when an agent answers to the article.
Solution
Upgrade to the latest available OTRS patch level (https://ftp.otrs.org/pub/otrs/).
Workaround
As a workaround, you can replace the affected files (see below for download).
ATTENTION: Please check if any of these files have been changed in your OTRS installation by additional add-ons. In that case you MUST NOT simply overwrite the files with the ones provided below. Please contact us instead.