The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.
Published January 10, 2020.
Getawesomesupport Awesome Support