Supportflow Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Supportflow Project records in CISA KEV

No Supportflow Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Supportflow · all components

TI-2016-09008 CVE-2016-10970 · GHSA-r3mx-wh9q-mf5x

LOW 29

The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01116 Published 2019-09-16 No fix listed CWE-79

TI-2016-09007 CVE-2016-10969 · GHSA-78x5-pqrx-4php

LOW 29

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01046 Published 2019-09-16 No fix listed CWE-79