23 matches found
CVE-2016-10970
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
EUVD-2016-1960
Malware in sbrugna...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10970
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
CVE-2016-10970
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
Design/Logic Flaw
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
Design/Logic Flaw
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
CVE-2016-10970
CVE-2016-10970 affects the WordPress plugin SupportFlow ; it is a stored XSS vulnerability in the ticket excerpt. The issue is present in plugin versions before 0.7. No exploitation details are provided in the documents. Remediation, as implied, is to upgrade to 0.7 or later (the fix version is n...
CVE-2016-10970
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
CVE-2016-10970
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10969
CVE-2016-10969: The WordPress SupportFlow plugin is vulnerable to stored XSS via a discussion ticket title in versions before 0.7. The issue originates from the plugin’s handling of ticket titles, enabling script injection that could execute in a user’s browser. Affects the SupportFlow WordPress ...
PT-2019-7762
Name of the Vulnerable Software and Affected Versions Supportflow plugin versions prior to 0.7 Description The issue allows for XSS via a discussion ticket title, potentially affecting WordPress sites using the Supportflow plugin. Recommendations For versions prior to 0.7, update to version 0.7 o...
CVE-2016-10970: Improper Neutralization of Input During Web Page Generation
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...
PT-2019-7763
Name of the Vulnerable Software and Affected Versions supportflow plugin versions prior to 0.7 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via a ticket excerpt. Recommendations For versions prior to 0.7, update to version 0.7 or later to resolve the issue...
