A vulnerability classified as problematic was found in Smartsupp Plugin up to 3.9.1 on WordPress. This issue affects some unknown processing. Executing a manipulation of the argument code can lead to cross site scripting.
This vulnerability is registered as CVE-2025-12448. It is possible to launch the attack remotely. No exploit is available.