CVE-2019-7299

概要

参考情報

• cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system · Exploit
• wordpress.org/plugins/wp-support-plus-responsive-ticket-system · Release Notes
• wpvulndb.com/vulnerabilities/9235 · Third Party Advisory

wp support plus responsive ticket system のその他の脆弱性

• CVE-2019-15331中 6.1The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
• CVE-2016-10930緊急 9.8The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
• CVE-2014-10391中 6.1The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
• CVE-2014-10390緊急 9.1The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
• CVE-2014-10389緊急 9.8The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.