PT-2025-52584
CVE-2025-9343
·
Published
2025-12-20
·
Updated
2026-09-28
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ELEX WordPress HelpDesk & Customer Ticketing System versions prior to 3.3.5
Description
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping in ticket subjects. An unauthenticated attacker can inject arbitrary web scripts that will execute when a user accesses the affected page.
Recommendations
Update the ELEX WordPress HelpDesk & Customer Ticketing System plugin to version 3.3.5 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾