Medium severity5.4NVD Advisory· Published Oct 17, 2018· Updated Jun 17, 2026
CVE-2018-18373
CVE-2018-18373
Description
In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sb_ajax_add_message action.
Affected products
3= 1.2.3+ 1 more
- (no CPE)range: = 1.2.3
- (no CPE)range: <=1.2.3
- cpe:2.3:a:schiocco:support_board_-_chat_and_help_desk:1.2.3:*:*:*:*:wordpress:*:*
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/149806/WordPress-Support-Board-1.2.3-Cross-Site-Scripting.htmlnvdThird Party AdvisoryVDB Entry
- wpvulndb.com/vulnerabilities/9707nvd
News mentions
0No linked articles in our index yet.