CVE-2018-18373

5.4MEDIUM

Key Information:

Vendor
Wordpress
Status
Support Board - Chat And Help Desk
Vendor
CVE Published:
17 October 2018

Summary

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sb_ajax_add_message action.

References

http://packetstormsecurity.com/files/149806/WordPress-Sup...
x_refsource_MISC
https://wpvulndb.com/vulnerabilities/9707
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.