Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-103370EUVD-2026-111734GHSA-H736-44V7-5C35

Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

The Awesome Support WordPress helpdesk and support plugin is affected by this vulnerability. It allows a logged-in user with elevated (custom-level) access to store malicious scripts through the ticket attachment uploader, which then run in the browsers of anyone who views the affected page.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpas_files' parameter in all versions up to, and including, 6.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is only exploitable when the "Enable drag-n-drop uploader for ticket form" setting is enabled, as it is disabled by default.

Timeline

  1. CVE published
  2. First seen by cve.now
  3. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  4. Record last updated

Affected versions

  • awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin

    through 6.4.1

References 6

wordfence.com

plugins.trac.wordpress.org

wordpress.org