[Bug 1140904] VUL-1: CVE-2018-11563: otrs: carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's bro