Aller au contenu
Se connecter
Non notée

CVE-2021-24741 The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code,…

Description

The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users.

Produits et versions touchés

Produit Versions touchées Corrigé en
Support Board 3.3 premières → < 3.3.4 3.3.4

Autres CVE de Support Board

Les 3 CVE de Support Board →
CVE-2021-24823 The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php… Non notée CVE-2021-24807 The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting… Non notée
Suivre cette CVE