Medium · 6.1 CVE-2021-36919 EUVD-2021-23495GHSA-wmx3-62wg-53jp

WordPress Awesome Support plugin <= 6.0.6 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities

Published Nov 26, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Awesome Support Product: Awesome Support (WordPress plugin) Category: Web / CMS

Description

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id, &assignee).

Affected products

Vendor	Product	Affected	Fixed
Awesome Support	Awesome Support (WordPress plugin)	<= 6.0.6 – ≤ 6.0.6	—

References

https://wordpress.org/plugins/awesome-support/#developers
https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-6-multiple-authenticated-reflected-cross-site-scripting-xss-vulnerabilities