CVE-2026-96820: WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability
Published Sep 30, 2026
·Updated
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
Affected Software
1 affected component
Awesome Support Awesome Support<=6.3.9
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Awesome Support pluginto a version that resolves this vulnerability.Fixed in 6.4.0
Event History
Sep 30, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A subscriber can exploit the cross-site scripting vulnerability in affected Awesome Support versions. The supplied data indicates no additional privileges are required beyond subscriber access.
2
Does exploitation require user interaction?
Yes. The CVSS vector specifies user interaction is required. The provided data does not state what action the victim must take.
3
Which versions are affected?
Awesome Support versions 6.3.9 and earlier are identified as affected. No fixed version is provided in the supplied data.