Filtered by vendor Oretnom23 Subscriptions
Filtered by product Customer Support System Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-49971 1 Oretnom23 1 Customer Support System 2025-01-15 6.1 Medium
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customer_support/index.php?page=customer_list.
CVE-2023-49973 1 Oretnom23 1 Customer Support System 2025-01-15 6.1 Medium
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customer_support/index.php?page=customer_list.
CVE-2023-50070 1 Oretnom23 1 Customer Support System 2024-11-21 8.8 High
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject.