Read the docs

Schiocco

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Schiocco records in CISA KEV

No Schiocco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Support Board 6 records MEDIUM Support Board - Chat And Help Desk 2 records MEDIUM

Records

2 records in Support Board - Chat And Help Desk · all components

TI-2021-07023 CVE-2021-24741 · GHSA-xr3p-gm2p-7rx5

Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections

Priority MEDIUM 51

The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL st…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05603 Published 2021-09-20 Fixed in 3.3.4 CWE-89
TI-2018-12991 CVE-2018-18373 · GHSA-rjxw-rrmr-pgg7

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored…

Priority LOW 26

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00795 Published 2018-10-17 No fix listed CWE-79
Open these records in search →