CVE-2016-11012

The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS...

Cross site scripting

The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS...

CVE-2016-11012

The CVE-2016-11012 entry affects the WordPress plugin sola-support-tickets prior to version 3.13 . The vulnerability is an incorrect access control for /wp-admin that enables an XSS condition. Public-facing details confirm an admin-page access issue can lead to script injections; no further explo...