GHSA-qrqm-574x-q7f2

Awesome Support vulnerable to persistent cross-site scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-38073

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	awesome-support/awesome-support	< 6.0.8	6.0.8

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 at WordPress.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-38073 advisory
https://github.com/Awesome-Support/Awesome-Support/commit/85f460be88b81fbdd9a990f474a1252297902faf web
https://github.com/Awesome-Support/Awesome-Support/commit/b2e831d7f831a3869cfd83eb79a398a5b5c0ec63 web
https://github.com/Awesome-Support/Awesome-Support package
https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-7-multiple-authenticated-stored-cross-sit… web
https://wordpress.org/plugins/awesome-support/#developers web