medium4.8
CVE-2021-24622
The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, …
Impact
The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emarketdesign | Customer Service Software \& Support Ticket System | before 5.10.4 |