CVE-2026-103370 | Awesome Support Plugin up to 6.4.1 on WordPress wpas_files cross site scripting

A vulnerability was found in Awesome Support Plugin up to 6.4.1 on WordPress. It has been declared as problematic. This affects an unknown function. The manipulation of the argument wpas_files results in cross site scripting. This vulnerability is identified as CVE-2026-103370. The attack can be executed remotely. There is not any exploit available.