CVE-2018-18373

—

CVSS 3.0

5.4 medium

EPSS

<1%p54

Published

Oct 17, 2018 (Oct 17, 2018)

Modified

Jun 17, 2026

Description

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sb_ajax_add_message action.

Vendors: schiocco
Products: support board - chat and help desk
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.