I did want to share the solution here for anyone else who may run into the issue: I had to uncheck the bottom two Clickjack Protection options in Session Settings:
I've re-checked them now that I'm done using the box office (Salesforce recommends enabling those features for improved security).
Thanks again.
Leave a comment: