CVE-2014-9179

2014-12-0216:59:16

CWE-79

mitre

web.nvd.nist.gov

cve-2014-9179

cross-site scripting

xss

vulnerability

supportezzy ticket system

wordpress

plugin

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

45.9%

JSON

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the “URL (optional)” field in a new ticket.

Affected configurations

Nvd

Node

supportezzy_ticket_system_projectsupportezzy_ticket_systemMatch1.2.5wordpress

VendorProductVersionCPE
supportezzy_ticket_system_projectsupportezzy_ticket_system1.2.5cpe:2.3:a:supportezzy_ticket_system_project:supportezzy_ticket_system:1.2.5:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
supportezzy_ticket_system_project	supportezzy_ticket_system	1.2.5	cpe:2.3:a:supportezzy_ticket_system_project:supportezzy_ticket_system:1.2.5:::::wordpress::