The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body.
Published July 18, 2019.
Automattic Camptix Event Ticketing