CVE-2014-9179

MEDIUM · 4.0 CVSS Gepubliceerd: 02-12-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.

Vendors

Supportezzy Ticket System Project

Affected products

Supportezzy Ticket System

References

packetstormsecurity.com