264 matches found
CVE-2019-20181
The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...
CVE-2019-20181
The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...
Design/Logic Flaw
The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...
PT-2020-10362
Name of the Vulnerable Software and Affected Versions awesome-support plugin version 5.8.0 Description The issue allows for XSS via the post title parameter. Recommendations For version 5.8.0, avoid using the post title parameter until the issue is resolved...
WordPress awesome-support cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in WordPress...
CVE-2019-20181: Improper Neutralization of Input During Web Page Generation
The awesome-support plugin 5.8.0 for WordPress allows XSS via the posttitle parameter...
WordPress awesome-support plugin security feature issue vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. The WordPress awesome-support plugin suffers from a security...
WordPress awesome-support plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2015-9317
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
CVE-2015-9318
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...
CVE-2015-9318
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...
CVE-2015-9318
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...
CVE-2015-9318
CVE-2015-9318 affects the WordPress plugin Awesome Support prior to 3.1.7. The vulnerability is that shortcodes are allowed in replies, stemming from the plugin’s handling of reply content. According to NVD, the issue has CVSS v2 base score 5.0 (MEDIUM) with impact on integrity while allowing net...
CVE-2015-9317
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
CVE-2015-9317
The CVE-2015-9317 entry concerns the WordPress plugin Awesome Support (before 3.1.7). Affected component: the plugin’s handling of custom information messages in the UI. Root cause: cross-site scripting (XSS) vulnerability that allows injection of client-side code via information messages. Impact...
CVE-2015-9317
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
CVE-2015-9318: Undefined Security Weakness
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies...
CVE-2015-9317: Improper Neutralization of Input During Web Page Generation
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages...
PT-2019-7276
Name of the Vulnerable Software and Affected Versions awesome-support plugin versions prior to 3.1.7 Description The issue allows for XSS via custom information messages. Recommendations For versions prior to 3.1.7, update to version 3.1.7 or later to resolve the issue...
PT-2019-7277
Name of the Vulnerable Software and Affected Versions awesome-support plugin versions prior to 3.1.7 Description The issue allows shortcodes in replies, which can lead to a security problem. Recommendations For versions prior to 3.1.7, update to version 3.1.7 or later to resolve the issue...