Help Desk WP <= 1.2.0 - Editor+ Stored XSS

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.

PoC

1. Using a user with Editor Role privileges, go to the support page assigned for the Help Desk WP Plugin. 2. Click on “Add New Ticket”, and fill the form with dummy data. 3. Intercept the request using an HTTP Proxy, such as BurpSuite. 4. Replace the “description” form data with the following XSS payload: 5. Send the request. 6. As an Administrator user, open up the ticket using the Help Desk WP Plugin through Wordpress Dashboard. 7. The XSS payload will get executed.