Unrated severityNVD Advisory· Published Oct 17, 2018· Updated Aug 5, 2024
CVE-2018-18373
CVE-2018-18373
Description
In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sb_ajax_add_message action.
Affected products
2- Range: = 1.2.3
Patches
Members only
Discovered fix commits and diffs is available to signed-in members. Sign in or create a free account to read it.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/149806/WordPress-Support-Board-1.2.3-Cross-Site-Scripting.htmlmitrex_refsource_MISC
- wpvulndb.com/vulnerabilities/9707mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.