CVE-2019-7299

A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php.

• CWE-79

• https://cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system/Exploit, Third Party Advisory
• https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developersRelease Notes, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9235Third Party Advisory
• https://cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system/Exploit, Third Party Advisory
• https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developersRelease Notes, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9235Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7292A validation issue was addressed with improved logic. This i…6.5
• CVE-2019-7293A memory corruption issue was addressed with improved memory…5.5
• CVE-2019-7295typora through 0.9.63 has XSS, with resultant remote command…
• CVE-2019-7296typora through 0.9.64 has XSS, with resultant remote command…
• CVE-2019-7297An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-7298An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-7300Artica Proxy 3.06.200056 allows remote attackers to execute …
• CVE-2019-7301Zen Load Balancer 3.10.1 allows remote authenticated admin u…
• CVE-2019-7303A vulnerability in the seccomp filters of Canonical snapd be…7.5
• CVE-2019-7304Canonical snapd before version 2.37.1 incorrectly performed …9.8
• CVE-2019-7305Information Exposure vulnerability in eXtplorer makes the /u…9.8
• CVE-2019-7306Byobu Apport hook may disclose sensitive information since i…7.5