Skip to content
OpenAdvisories

Vendor

Schiocco

8 known vulnerabilities.

Products

Support Board 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.7
    CVE-2026-4815

    SQL Injection vulnerability in Support Board

    A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete database via 'calls[0][message_ids][]' parameter in '/supportboard/include/ajax.php' endpoint.

    Schiocco Support Board
  • High 7.1
    CVE-2025-60182

    WordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through < 3.8.7.

    Schiocco Support Board
  • High 7.1
    CVE-2025-54027

    WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through <= 3.8.0.

    Schiocco Support Board
  • High 8.1
    CVE-2025-54031

    WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Schiocco Support Board supportboard allows PHP Local File Inclusion.This issue affects Support Board: from n/a through <= 3.8.0.

    Schiocco Support Board