CVE-2021-24622: Improper Neutralization of Input During Web Page Generation

The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2021-16138

Name of the Vulnerable Software and Affected Versions Customer Service Software & Support Ticket System WordPress plugin versions prior to 5.10.4 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization or escaping of form fields...