5.4
Medium
CVE-2023-1019 The Help Desk WP WordPress plugin through 1.2.0 does not sanitise and escape some parameters, which could allow users…
Description
The Help Desk WP WordPress plugin through 1.2.0 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Help Desk WP 1.2 | earliest → 1.2.0 | No fix stated |