CVE-2023-5354: 
WordPress vulnerability analysis and mitigation

CVE-2023-5354 affects the Awesome Support WordPress plugin versions before 6.1.5. The vulnerability was discovered and publicly disclosed on October 16, 2023. This security issue impacts the WordPress plugin's parameter handling functionality, specifically affecting high-privilege users such as administrators (WPScan, NVD).

The vulnerability is classified as a Reflected Cross-Site Scripting (XSS) issue. The root cause is the plugin's failure to properly sanitize and escape a parameter before outputting it back in the page. The vulnerability has been assigned a CVSS v3.1 base score of 6.1 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (NVD).

The vulnerability allows attackers to execute cross-site scripting attacks against high-privilege users such as administrators. When successfully exploited, this could lead to unauthorized actions being performed in the context of the administrator's session (WPScan).

The vulnerability has been patched in version 6.1.5 of the Awesome Support WordPress plugin. Users are advised to update to this version or later to mitigate the security risk (WPScan).