medium6.1
CVE-2016-10969
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
Impact
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Supportflow Project | Supportflow | before 0.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/SupportFlow/supportflow/commit/c08d376072f093b650c49dcb44124f43ea0177b1
- https://wordpress.org/plugins/supportflow/#developers
- https://github.com/SupportFlow/supportflow/commit/c08d376072f093b650c49dcb44124f43ea0177b1
- https://wordpress.org/plugins/supportflow/#developers