Medium · 6.5 CVE-2024-51910 EUVD-2024-45704GHSA-874j-2w8f-c73r

WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Published Nov 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ezlab Product: Assist24 Help Desk

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through <= 20150401.2.

Affected products

Vendor	Product	Affected	Fixed
ezlab	Assist24 Help Desk	≤ 20150401.2	—

References

https://patchstack.com/database/Wordpress/Plugin/assist24it/vulnerability/wordpress-assist24-help-desk-plugin-20150401-2-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry