CVE-2025-22762

Summary

CVE-2025-22762 is a Cross-Site Scripting (XSS) vulnerability affecting the WordPress HelpDesk & Support Ticket System Plugin – Octrace Support, from versions n/a through 1.2.7. Malicious actors can exploit this flaw to inject malicious scripts into a webpage generated by the plugin, potentially gaining unauthorized access to user data or taking control of user sessions. This can occur due to improper neutralization of user input during the plugin's web page generation process. Users are advised to update the plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.