CVE-2021-24807

The Support Board WordPress plugin before 3.3.5 allows Authenticated Agent+ users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authenticated user go to the chat the XSS will be automatically executed...

CVE-2021-24807

creationtimestamp| type| source ---|---|--- 2021-11-13 15:31:13+00:00| published-proof-of-concept| Telegram/W0hiKnvlawQiz72xz36c1gwR2511rgPM525hD2dKBpyNg...

CVE-2021-24807

The Support Board WordPress plugin before 3.3.5 allows Authenticated Agent+ users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authenticated user go to the chat the XSS will be automatically executed...

CVE-2021-24807

The vulnerability is CVE-2021-24807 affecting the WordPress Support Board plugin (versions before 3.3.5). It allows Authenticated (Agent+) users to perform Stored Cross-Site Scripting by placing a payload in the notes field; when an administrator or any authenticated user opens the chat, the XSS ...