CVE-2015-9318

CVE-2015-9318 affects the WordPress plugin Awesome Support prior to 3.1.7. The vulnerability is that shortcodes are allowed in replies, stemming from the plugin’s handling of reply content. According to NVD, the issue has CVSS v2 base score 5.0 (MEDIUM) with impact on integrity while allowing net...

CVE-2015-9318

The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...

CVE-2015-9317

The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...

CVE-2015-9317

The CVE-2015-9317 entry concerns the WordPress plugin Awesome Support (before 3.1.7). Affected component: the plugin’s handling of custom information messages in the UI. Root cause: cross-site scripting (XSS) vulnerability that allows injection of client-side code via information messages. Impact...

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Viewing Vulnerability

WordPress Awesome Support plugin Authenticated Arbitrary File Viewing Vulnerability exists in the function wpastoolslogviewerview accessible through WordPress’ AJAX functionality in the file /includes/admin/functions-log-viewer.php: Solution Update the plugin...

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Deletion Vulnerability

WordPress Awesome Support plugin Authenticated Arbitrary File Deletion Vulnerability exists in the function wpastoolslogviewerdelete accessible to anyone logged in, by allowing access through WordPress’ AJAX functionality in the file /includes/admin/functions-log-viewer.php: Solution Update the...

Awesome Support < 3.1.7 - XSS & Shortcodes Allowed in Replies

The Awesome Support – WordPress HelpDesk & Support Plugin WordPress plugin was affected by a XSS & Shortcodes Allowed in Replies security vulnerability...

WordPress Awesome Support - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...