Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-38073 EUVD-2022-6922GHSA-qrqm-574x-q7f2

WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)

Published Sep 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 at WordPress.

Affected products

VendorProductAffectedFixed
Awesome Support Team Awesome Support (WordPress plugin) <= 6.0.7 – ≤ 6.0.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist awesome-support/awesome-support < 6.0.8 6.0.8 GHSA-qrqm-574x-q7f2

References