CVE-2025-12264 | Wisencode up to 20251012 Create Support Ticket /support-ticket/create Message cross site scripting

A vulnerability labeled as problematic has been found in Wisencode up to 20251012. Affected by this vulnerability is an unknown functionality of the file /support-ticket/create of the component Create Support Ticket Handler. The manipulation of the argument Message results in cross site scripting.

This vulnerability is cataloged as CVE-2025-12264. The attack may be launched remotely. There is no exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.