10 matches found
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
EUVD-2016-1960
Malware in sbrugna...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
Design/Logic Flaw
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10969
CVE-2016-10969: The WordPress SupportFlow plugin is vulnerable to stored XSS via a discussion ticket title in versions before 0.7. The issue originates from the plugin’s handling of ticket titles, enabling script injection that could execute in a user’s browser. Affects the SupportFlow WordPress ...
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
CVE-2016-10969: Improper Neutralization of Input During Web Page Generation
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...
PT-2019-7762
Name of the Vulnerable Software and Affected Versions Supportflow plugin versions prior to 0.7 Description The issue allows for XSS via a discussion ticket title, potentially affecting WordPress sites using the Supportflow plugin. Recommendations For versions prior to 0.7, update to version 0.7 o...