Read the docs

Support Ticket System Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Support Ticket System Project records in CISA KEV

No Support Ticket System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Support Ticket System · all components

Priority MEDIUM 48

Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03117 Published 2017-09-26 No fix listed CWE-89
Open these records in search →