title: SupportCandy < 2.2.7 - CSRF to Cross-Site Scripting
description: The SupportCandy WordPress plugin before 2.2.7 does not have CSRF check in the wpsc_tickets AJAX action, nor has any sanitisation or escaping in some of the filter fields which could allow attackers to make a logged in user having access to the ticket lists dashboard set an arbitrary filter (stored in their cookies) with an XSS payload in it.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: SupportCandy – Helpdesk & Support Ticket System
vendor: Unknown
versions:
lessThan: 2.2.7, status: affected, version: 2.2.7, versionType: custom
}