Vulnerabilities (CVE)

Filtered by vendor Schiocco Subscribe
Filtered by product Support Board
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24807 1 Schiocco 1 Support Board 2021-11-09 3.5 LOW 5.4 MEDIUM
The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authenticated user go to the chat the XSS will be automatically executed.