PatchTheCVEsupportflow vulnerabilities and fixes
Recent CVEs affecting supportflow, with upgrade or downgrade steps. 2 tracked.
supportflow has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-09-16. Highest priority: CVE-2016-10970 (score 38/100).
- CVE-2016-10970 MEDIUM 6.1 UPGRADE The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.
- CVE-2016-10969 MEDIUM 6.1 UPGRADE The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
FAQ
How do I fix supportflow vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is supportflow being exploited right now?
None of the tracked supportflow CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which supportflow CVE should I patch first?
CVE-2016-10970 currently ranks highest (38/100): The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt..