WordPress Plugin Vulnerabilities
Support Ticket System By Phoeniixx <= 2.7 - Unauthenticated Reflected XSS
Description
Bad user input sanitisation leads to unauthenticated reflected XSS.
Edit (WPScanTeam):
January 27th, 2020 - Report received & WP Plugin team notified
January 31st, 2020 - WP plugin team acknowledgement & plugin closed.
April 11th, 2020 - No updates, disclosing.
Proof of Concept
Affects Plugins
No known fix Classification
Type
XSS
OWASP top 10
CWE
Miscellaneous
Original Researcher
Max
Submitter website
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2020-04-11 (about 6 years ago)
Added
2020-04-11 (about 6 years ago)
Last Updated
2020-04-11 (about 6 years ago)
WPScan 