CVE-2022-27852

Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions.
Configurations

Configuration 1 (hide)

cpe:2.3:a:wpchill:kb_support:*:*:*:*:*:wordpress:*:*

History

16 Sep 2024, 20:15

Type Values Removed Values Added
Summary (en) Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions. (en) Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions.

22 Apr 2022, 01:10

Type Values Removed Values Added
References (CONFIRM) https://wordpress.org/plugins/kb-support/#developers - (CONFIRM) https://wordpress.org/plugins/kb-support/#developers - Product
References (CONFIRM) https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-wordpress-help-desk-plugin-1-5-5-multiple-unauthenticated-stored-cross-site-scripting-xss-vulnerabilities - (CONFIRM) https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-wordpress-help-desk-plugin-1-5-5-multiple-unauthenticated-stored-cross-site-scripting-xss-vulnerabilities - Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 6.1
CPE cpe:2.3:a:wpchill:kb_support:*:*:*:*:*:wordpress:*:*

15 Apr 2022, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-04-15 17:15

Updated : 2024-09-16 20:15


NVD link : CVE-2022-27852

Mitre link : CVE-2022-27852

CVE.ORG link : CVE-2022-27852


JSON object : View

Products Affected

wpchill

  • kb_support
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')