PatchTheCVEsupportflow project vulnerabilities
Recent CVEs affecting supportflow project products. 2 tracked.
supportflow project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-09-16. Highest priority: CVE-2016-10970 (score 38/100).
- CVE-2016-10970 MEDIUM 6.1 UPGRADE The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.
- CVE-2016-10969 MEDIUM 6.1 UPGRADE The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
FAQ
How do I fix supportflow project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is supportflow project being exploited right now?
None of the tracked supportflow project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which supportflow project CVE should I patch first?
CVE-2016-10970 currently ranks highest (38/100): The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt..