Medium severity6.1NVD Advisory· Published Nov 26, 2021· Updated Jun 17, 2026

CVE-2021-36919

Description

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id, &assignee).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Getawesomesupport/Awesome Support
cpe:2.3:a:getawesomesupport:awesome_support:*:*:*:*:*:wordpress:*:*
Range: <=6.0.6
WordPress/Awesome Supportllm-fuzzy
Range: <=6.0.6
Package: https://wordpress.org/plugins/awesome-support
Awesome Support/Awesome Support (WordPress plugin)v5
Range: <= 6.0.6

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-6-multiple-authenticated-reflected-cross-site-scripting-xss-vulnerabilitiesnvdThird Party Advisory
wordpress.org/plugins/awesome-support/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000