CVE-2016-10969

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-09-16

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Supportflow (Supportflow Project)

References

• https://github.com/SupportFlow/supportflow/commit/c08d376072f093b650c49dcb44124f43ea0177b1
• https://wordpress.org/plugins/supportflow/#developers