HTML Injection Vulnerability in WP Support Plus Responsive Ticket System by WordPress
CVE-2019-15331

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
WP Support Plus Responsive Ticket System
Vendor
CVE Published:
22 August 2019

What is CVE-2019-15331?

The WP Support Plus Responsive Ticket System plugin for WordPress prior to version 9.1.2 contains an HTML injection vulnerability that allows attackers to inject arbitrary HTML code. This can lead to various security risks, including defacement, redirection to malicious sites, or impersonation of users. It's crucial for website administrators using this plugin to update to the latest version to mitigate potential attacks.

References

https://wordpress.org/plugins/wp-support-plus-responsive-...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.