The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.

Published Sep 16, 2019 · Updated Aug 6, 2024 · Assigned by mitre