The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.Referenceshttps://wordpress.org/plugins/supportflow/#developershttps://github.com/SupportFlow/supportflow/commit/c507cc863d161f87c28d0682714bf188ffac1a67