CVE-2019-7299

Mô tả

Tham khảo

• cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system · Exploit
• wordpress.org/plugins/wp-support-plus-responsive-ticket-system · Release Notes
• wpvulndb.com/vulnerabilities/9235 · Third Party Advisory

Lỗ hổng khác của wp support plus responsive ticket system

• CVE-2019-15331TRUNG BÌNH 6.1The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection.
• CVE-2016-10930NGHIÊM TRỌNG 9.8The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
• CVE-2014-10391TRUNG BÌNH 6.1The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
• CVE-2014-10390NGHIÊM TRỌNG 9.1The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
• CVE-2014-10389NGHIÊM TRỌNG 9.8The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.