6.1
Moyenne
CVE-2023-5354 The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back…
Description
The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Awesome Support 6.1 | premières → < 6.1.5 | 6.1.5 |
Autres CVE de Awesome Support
Les 4 CVE de Awesome Support →
CVE-2023-5355
The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files,…
8.1
Élevée
CVE-2023-5352
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing…
4.3
Moyenne
CVE-2022-3511
The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded…
6.5
Moyenne