CVE-2022-27852

The CVE-2022-27852 entry concerns the WordPress plugin KB Support (

CVE-2022-27852

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...

WordPress KB Support – WordPress Help Desk plugin <= 1.5.5 - Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in WordPress KB Support – WordPress Help Desk plugin versions = 1.5.5. Solution Update the WordPress KB Support plugin to the latest available version at least 1.5.6...

WordPress plugin KB Support 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

KB Support <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape multiple parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...