CVE-2021-36919

Multiple Authenticated Reflected Cross-Site Scripting XSS vulnerabilities in WordPress Awesome Support plugin versions = 6.0.6, vulnerable parameters &id, &assignee...

Cross site scripting

Multiple Authenticated Reflected Cross-Site Scripting XSS vulnerabilities in WordPress Awesome Support plugin versions = 6.0.6, vulnerable parameters &id, &assignee...

CVE-2021-36919

CVE-2021-36919 affects WordPress Awesome Support plugin

WordPress 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Awesome Support plugin in 6.0.6 and its...

WordPress Awesome Support plugin <= 6.0.6 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Reflected Cross-Site Scripting XSS vulnerabilities were discovered by Ex.Mi in WordPress Awesome Support plugin versions = 6.0.6. Solution Update the WordPress Awesome Support plugin to the latest available version at least 6.0.7...

Awesome Support < 6.0.7 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the id and assignee parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue...

Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)

Description The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues Edit WPScanTeam: - The original report mentioned the issue...

CVE-2019-20181

The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...

CVE-2019-20181

The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...

Design/Logic Flaw

The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...

WordPress awesome-support cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress awesome-support plugin security feature issue vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. The WordPress awesome-support plugin suffers from a security...

WordPress awesome-support plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2015-9318

The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...

CVE-2015-9317

The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...

CVE-2015-9318

CVE-2015-9318 affects the WordPress plugin Awesome Support prior to 3.1.7. The vulnerability is that shortcodes are allowed in replies, stemming from the plugin’s handling of reply content. According to NVD, the issue has CVSS v2 base score 5.0 (MEDIUM) with impact on integrity while allowing net...

CVE-2015-9318

The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...

CVE-2015-9317

The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...

CVE-2015-9317

The CVE-2015-9317 entry concerns the WordPress plugin Awesome Support (before 3.1.7). Affected component: the plugin’s handling of custom information messages in the UI. Root cause: cross-site scripting (XSS) vulnerability that allows injection of client-side code via information messages. Impact...

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Viewing Vulnerability

WordPress Awesome Support plugin Authenticated Arbitrary File Viewing Vulnerability exists in the function wpastoolslogviewerview accessible through WordPress’ AJAX functionality in the file /includes/admin/functions-log-viewer.php: Solution Update the plugin...