← CVE Intelligence

CVE-2021-24878

SupportCandy < 2.2.7 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / SupportCandy – Helpdesk & Support Ticket Systemaffected 2.2.7 before 2.2.7

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.