53 matches found
CVE-2023-25983 WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84...
CVE-2023-25983
CVE-2023-25983 affects the WordPress KB Support plugin (WPOmnia KB Support), specifically versions
CVE-2023-25983: Improper Neutralization of Formula Elements in a CSV File
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84...
PT-2023-20408 · Unknown · Wpomnia Kb Support
Name of the Vulnerable Software and Affected Versions: WPOmnia KB Support versions 1.5.84 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects WPOmnia KB Support. Recommendations: For versions 1.5.84 and earlier, update to a...
WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection
Software KB Support Type Plugin Vulnerable versions = 1.5.84 Fixed in 1.5.85 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2023-25983 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID b58305c78eef Credits Rafshanzani Suhada Required privilege Subscriber...
CVE-2022-27852
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
Cross site scripting
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
CVE-2022-27852
The CVE-2022-27852 entry concerns the WordPress plugin KB Support (
CVE-2022-27852
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...
WordPress KB Support – WordPress Help Desk plugin <= 1.5.5 - Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in WordPress KB Support – WordPress Help Desk plugin versions = 1.5.5. Solution Update the WordPress KB Support plugin to the latest available version at least 1.5.6...
WordPress plugin KB Support 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
KB Support <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting
The plugin does not sanitise and escape multiple parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...
CVE-2022-27852: Improper Neutralization of Input During Web Page Generation
Multiple Unauthenticated Stored Cross-Site Scripting XSS vulnerabilities in KB Support WordPress plugin = 1.5.5 versions...