Input validation vulnerability in Customer Service Software & Support Ticket System 5.13

The Customer Service Software & Support Ticket System plugin for WordPress has a security vulnerability in versions up to and including 5.12.0. If you have a multi-site installation or have disabled unfiltered_html, this vulnerability could allow attackers with administrator-level permissions to inject malicious web scripts onto pages that will run whenever someone accesses them. This is because there is not enough protection against malicious input or enough security measures in place to prevent the scripts from running.