Vulnerabilidades de Schiocco
CVEs publicadas que afetam produtos de Schiocco: 4 registro(s), com severidade, exploração e correções.
CVE-2026-27395
Crítica · 9.8
CWE-266 17/06/2026
WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.
CVE-2026-4816
Média · 5.4
CWE-79 25/03/2026
Reflected Cross Site Scripting (XSS) vulnerability in Support Board
A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the 'search' parameter in '/supportboard/include/articles.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
CVE-2026-4815
Alta · 8.8
CWE-89 25/03/2026
SQL Injection vulnerability in Support Board
A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls[0][message_ids][]' parameter in '/supportboard/include/ajax.php' endpoint.
CVE-2025-60182
Alta · 7.1
CWE-79 18/12/2025
WordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through < 3.8.7.