Lucene search
+L

1256 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 10:37 p.m.25 views

CVE-2024-8548

The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the /includes/ajax-functions.php file all versions up to, and including, 1.6.6. This makes it possible...

8.1CVSS6AI score0.00363EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/04 7:15 a.m.12 views

CVE-2024-13607

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS0.00411EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/04 6:41 a.m.3 views

CVE-2024-13607 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS6.7AI score0.00411EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/04 6:41 a.m.52 views

CVE-2024-13607

CVE-2024-13607 : The WordPress plugin “JS Help Desk – The Ultimate Help Desk & Support Plugin” is vulnerable to Insecure Direct Object Reference via exportusereraserequest in all versions up to and including 2.8.8. Authenticated users with Subscriber-level permissions and above can export ticket ...

4.3CVSS4.3AI score0.00411EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/04 6:41 a.m.25 views

CVE-2024-13607 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS0.00411EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/04 12:00 a.m.5 views

WordPress plugin JS Help Desk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.8AI score0.00411EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/02/03 10:25 p.m.7 views

WordPress JS Help Desk plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by Tim Coen in WordPress Plugin JS Help Desk versions = 2.8.8...

4.3CVSS7AI score0.00411EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/01/31 9:15 a.m.45 views

CVE-2025-22757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Stored XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

6.5CVSS0.00257EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/31 9:15 a.m.12 views

CVE-2025-22757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk allows Stored XSS. This issue affects CodeBard Help Desk: from n/a through 1.1.2...

5.4CVSS7.3AI score0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/31 8:23 a.m.50 views

CVE-2025-22757 WordPress CodeBard Help Desk plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Stored XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

6.5CVSS0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/31 8:23 a.m.8 views

CVE-2025-22757 WordPress CodeBard Help Desk plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk allows Stored XSS. This issue affects CodeBard Help Desk: from n/a through 1.1.2...

6.5CVSS6.4AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/31 8:23 a.m.63 views

CVE-2025-22757

CVE-2025-22757 describes an stored XSS in the WordPress plugin CodeBard Help Desk . The vulnerability arises from improper neutralization of input during web page generation, affecting the plugin version range "from n/a through 1.1.2". Connected sources consistently identify the affected product ...

6.5CVSS7.2AI score0.00257EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/31 12:00 a.m.10 views

WordPress plugin CodeBard Help Desk 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

6.5CVSS7.5AI score0.00257EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/15 4:15 p.m.10 views

CVE-2025-22760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through 1.1.2...

6.1CVSS7.3AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/15 4:15 p.m.35 views

CVE-2025-22760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

7.1CVSS0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/15 3:23 p.m.59 views

CVE-2025-22760 WordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

7.1CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/15 3:23 p.m.84 views

CVE-2025-22760

CVE-2025-22760 is a Reflected Cross‑Site Scripting vulnerability in the CodeBard Help Desk WordPress plugin. The initial description states improper neutralization of input during web page generation, enabling Reflected XSS, and the vulnerability affects CodeBard Help Desk versions from n/a up to...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/15 3:23 p.m.11 views

CVE-2025-22760 WordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.9 views

WordPress plugin CodeBard Help Desk 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

7.1CVSS7.5AI score0.00276EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/14 6:26 a.m.12 views

WordPress CodeBard Help Desk plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin CodeBard Help Desk versions = 1.1.2...

6.5CVSS6.1AI score0.00257EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder