CVE-2023-1019

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p39

Published

May 15, 2023 (May 15, 2023)

Modified

Jun 17, 2026

Description

The Help Desk WP WordPress plugin through 1.2.0 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.

Vendors: help desk wp project
Products: help desk wp
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.