Medium · 6.1 CVE-2022-27852 EUVD-2022-32340GHSA-8cwx-q8q6-7gpg

WordPress KB Support plugin <= 1.5.5 - Multiple Unauth. Stored Cross-Site Scripting (XSS) vulnerabilities

Published Apr 15, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPChill Media Labs L.L.C Product: KB Support Category: Web / CMS

Description

Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions.

Affected products

Vendor	Product	Affected	Fixed
WPChill Media Labs L.L.C	KB Support	≤ 1.5.5	—

References

https://patchstack.com/database/vulnerability/kb-support/wordpress-kb-support-wordpress-help-desk-plugin-1-5-5-multiple-unauthenticated-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve vdb-entry