CVE-2021-24623

MEDIO 4.8CVE-2021-24623 · Published 13/09/2021 · updated 17/06/2026

In breve

CVE-2021-24623 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda wordpress advanced ticket system (ticket-system).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.62%, superiore al 49.9% delle vulnerabilità.
Correzione: aggiornare a 1.0.64 o successiva.

Package	Affected versions	Patched versions
wordpress advanced ticket system ticket-system	`< 1.0.64`	`1.0.64`

Description

The WordPress Advanced Ticket System, Elite Support Helpdesk WordPress plugin before 1.0.64 does not sanitize or escape form values before saving to the database or when outputting, which allows high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

References

wpscan.com/vulnerability/41d9027c-a982-44c7-889e-721333496b5c · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free