The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.Referenceshttps://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
