customer support system vulnerabilities and fixes

Recent CVEs affecting customer support system, with upgrade or downgrade steps. 20 tracked.

Also searched as: customersupportsystem.

customer support system has 20 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-18. Highest priority: CVE-2023-49547 (score 61/100).

• CVE-2025-70141 CRITICAL 9.4 DOWNGRADE SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php
• CVE-2025-40729 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which all
• CVE-2025-40728 HIGH 8.8 DOWNGRADE SQL injection vulnerability in Customer Support System v1.0
• CVE-2023-51281 MEDIUM 5.4 DOWNGRADE Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privi
• CVE-2023-50071 HIGH 8.8 DOWNGRADE Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/aja
• CVE-2023-50070 HIGH 8.8 DOWNGRADE Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/aja
• CVE-2023-49978 HIGH 8.8 DOWNGRADE Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative
• CVE-2023-49977 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary
• CVE-2023-49976 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary
• CVE-2023-49974 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary
• CVE-2023-49973 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary
• CVE-2023-49971 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary
• CVE-2023-49970 CRITICAL 9.8 DOWNGRADE Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter a
• CVE-2023-49969 MEDIUM 4.3 DOWNGRADE Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /cu
• CVE-2023-49968 HIGH 7.3 DOWNGRADE Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /cu
• CVE-2023-49548 HIGH 8.8 DOWNGRADE Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter
• CVE-2023-49547 CRITICAL 9.8 DOWNGRADE Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter
• CVE-2023-49546 HIGH 8.8 DOWNGRADE Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at
• CVE-2023-49545 HIGH 7.5 DOWNGRADE A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensi
• CVE-2023-49544 MEDIUM 4.9 DOWNGRADE A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and

FAQ

How do I fix customer support system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is customer support system being exploited right now?

None of the tracked customer support system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which customer support system CVE should I patch first?

CVE-2023-49547 currently ranks highest (61/100): Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter .

RSS feed for customer support system · ← Back to latest CVEs