CVE-2018-18373

Name of the Vulnerable Software and Affected Versions Schiocco Support Board - Chat And Help Desk plugin version 1.2.3

Description A Stored XSS issue has been found in the file upload areas of the Chat and Help Desk sections. This is achieved via the msg parameter in the "/wp-admin/admin-ajax.php" API endpoint, specifically in the sb ajax add message action.

Recommendations For Schiocco Support Board - Chat And Help Desk plugin version 1.2.3, consider disabling the file upload feature in the Chat and Help Desk sections until a patch is available. Avoid using the msg parameter in the "/wp-admin/admin-ajax.php" API endpoint with the sb ajax add message action to minimize the risk of exploitation.