CVE-2016-10969 (supportflow)

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.

View Full Alert