Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Schiocco Component: Support Board - Chat And Help Desk Clear all filters
TI-2021-07023 CVE-2021-24741 · GHSA-xr3p-gm2p-7rx5

Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections

Priority MEDIUM 51

The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL st…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05603 Published 2021-09-20 Fixed in 3.3.4 CWE-89
TI-2018-12991 CVE-2018-18373 · GHSA-rjxw-rrmr-pgg7

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored…

Priority LOW 26

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00795 Published 2018-10-17 No fix listed CWE-79