CVE-2014-9179: Supportezzy Ticket System Project Supportezzy Ticket System

Medium severity, CVSS 4.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.

Affected products

• Supportezzy Ticket System Project Supportezzy Ticket System: version 1.2.5 only

Published 2014-12-02. Last modified 2026-06-17.