Input validation vulnerability in WordPress HelpDesk & Support Ticket System Plugin – Octrace Support 1.2.7

The WordPress HelpDesk & Support Ticket System Plugin, called Octrace Support, has a security issue. This means that up to version 1.2.7, the plugin is vulnerable to a type of attack called Stored Cross-Site Scripting. This happens because the plugin does not properly clean up input and output. As a result, attackers who have administrator-level access or higher can insert malicious code into pages that will run when a user visits that page. This problem only affects websites that have multiple installations or have disabled a security feature called unfiltered_html.