The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
Published August 20, 2019.
Getawesomesupport Awesome Support