In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.Referenceshttps://advisories.octopus.com/post/2022/sa2022-07/