CVE-2021-24622

MEDIO 4.8CVE-2021-24622 · Published 18/10/2021 · updated 17/06/2026

In breve

CVE-2021-24622 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda customer service software & support ticket system (emarketdesign).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.64%, superiore al 50.9% delle vulnerabilità.
Correzione: aggiornare a 5.10.4 o successiva.

Package	Affected versions	Patched versions
customer service software & support ticket system emarketdesign	`< 5.10.4`	`5.10.4`

Description

The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

References

wpscan.com/vulnerability/41a2c72c-7db1-473a-8844-47f6ae9d0594 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free