Security Advisory
CVE-2014-9179
4
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.
Published Date
December 2, 2014
Official Source
NIST NVD Advisory