CVE-2026-4816: falha de média gravidade em Schiocco Support Board
Reflected Cross Site Scripting (XSS) vulnerability in Support Board
Publicada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.2%
probabilidade de exploração
0.2%top 87% das CVEs
exploração observada
nãonenhuma fonte reporta
A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the 'search' parameter in '/supportboard/include/articles.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Produtos afetados
Schiocco · Support BoardCVEs relacionadas — Schiocco Support Board
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4828CRITICALSupport Board <= 3.8.0 - Unauthenticated Arbitrary File DeletionEPSS 0.9%CVE-2025-54031HIGHWordPress Support Board <= 3.8.0 - Local File Inclusion VulnerabilityEPSS 0.7%CVE-2026-27395CRITICALWordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2025-4855CRITICALSupport Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret KeyEPSS 0.4%CVE-2026-4815HIGHSQL Injection vulnerability in Support BoardEPSS 0.2%CVE-2025-54027HIGHWordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%