| CVE-2021-24880 |
The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which…
|
Not rated
|
Feb 7, 2022 |
| CVE-2021-24879 |
The SupportCandy WordPress plugin before 2.2.7 does not have CSRF check in the wpsc_tickets AJAX action, nor has any…
|
Not rated
|
Feb 7, 2022 |
| CVE-2021-24878 |
The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back…
|
Not rated
|
Feb 7, 2022 |
| CVE-2021-24843 |
The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could…
|
Not rated
|
Feb 7, 2022 |
| CVE-2021-24839 |
The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CSRF checks in its wpsc_tickets AJAX…
|
Not rated
|
Feb 7, 2022 |