Support Board
Approved changes feed: RSS · Atom
cpe:2.3:a:schiocco:support_board:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schiocco (d6f6484d-996d-502d-a7d7-bd3075b60376) |
|---|---|
| Product | Support Board (6c3f6de9-e141-577e-bc9d-34c54b0c7eec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27395 |
vulnerable | 2026-07-29 00:34:59.504477 |
WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability
CRITICAL (9.8)
Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.
Published: 2026-06-16T20:57:21.720Z
Updated: 2026-06-17T10:44:23.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4816 |
vulnerable | 2026-06-08 08:07:02.414893 |
Reflected Cross Site Scripting (XSS) vulnerability in Support Board
A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the 'search' parameter in '/supportboard/include/articles.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
Published: 2026-03-25T13:31:47.952Z
Updated: 2026-03-25T14:56:58.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4815 |
vulnerable | 2026-06-08 08:07:02.412050 |
SQL Injection vulnerability in Support Board
A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls[0][message_ids][]' parameter in '/supportboard/include/ajax.php' endpoint.
Published: 2026-03-25T13:31:52.953Z
Updated: 2026-03-25T17:41:55.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60182 |
vulnerable | 2026-06-08 07:37:26.734312 |
WordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through < 3.8.7.
Published: 2025-12-18T07:22:09.410Z
Updated: 2026-04-28T18:39:33.901Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54031 |
vulnerable | 2026-06-08 07:33:11.026922 |
WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability
HIGH (8.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Schiocco Support Board supportboard allows PHP Local File Inclusion.This issue affects Support Board: from n/a through <= 3.8.0.
Published: 2025-08-20T08:02:59.891Z
Updated: 2026-04-28T16:13:29.200Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54027 |
vulnerable | 2026-06-08 07:33:11.019665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4855 |
vulnerable | 2026-06-08 07:29:17.413614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4828 |
vulnerable | 2026-06-08 07:29:17.362555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.