Vulnerability Details CVE-2021-24623
The WordPress Advanced Ticket System, Elite Support Helpdesk WordPress plugin before 1.0.64 does not sanitize or escape form values before saving to the database or when outputting, which allows high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.5%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
Products affected by CVE-2021-24623
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.1
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.10
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.11
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.12
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.13
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.14
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.15
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.16
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.17
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.18
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.19
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.2
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.20
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.21
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.22
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.23
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.24
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.25
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.26
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.27
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.28
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.29
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.3
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.30
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.31
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.32
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.33
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.34
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.35
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.36
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.37
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.38
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.39
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.4
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.40
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.41
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.42
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.43
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.44
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.45
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.46
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.47
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.48
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.49
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.5
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.50
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.51
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.52
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.53
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.54
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.55
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.56
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.57
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.58
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.59
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.6
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.60
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.61
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.62
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.63
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.7
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.8
-
cpe:2.3:a:ticket-system:wordpress_advanced_ticket_system:1.0.9