Beveiligingsadvies

CVE-2024-8632

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-01 07:30:13

Laatst bijgewerkt 2026-04-08 17:01:31

Toegewezen door Wordfence

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbs_ajax_load_front_end_replies' and 'kbs_ajax_mark_reply_as_read' functions in all versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to read replies of any ticket, and mark any reply as read.

← Alle CVE's bekijken Bekijk op cve.org ↗