CVE-2014-9179

WordPress SupportEzzy Ticket System 1.2.5 - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.

Exploits (1)

exploitdb WRITEUP
by Halil Dalabasmaz · textwebappsphp
https://www.exploit-db.com/exploits/35218

References (1)

Core 1

Scores

EPSS 0.0026
EPSS Percentile 48.8%

Details

CWE
CWE-79
Status published
Products (1)
supportezzy_ticket_system_project/supportezzy_ticket_system 1.2.5
Published Dec 02, 2014
Tracked Since Feb 18, 2026