Schiocco records

8 published records for vendor schiocco.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2021-24741Proof of concept	Support Board < 3.3.4 - Multiple Unauthenticated SQL Injectionsschiocco · support board - chat and help desk · CWE-89 Pre-auth SQL injection	Critical9.8	—	5.6%	Sep 20, 2021
39Monitor	CVE-2025-4828No exploit	Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletionschiocco · support board · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	0.9%	Jul 8, 2025
39Monitor	CVE-2025-4855No exploit	Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Keyschiocco · support board · CWE-639 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	0.3%	Jul 8, 2025
34Monitor	CVE-2026-4815No exploit	SQL Injection vulnerability in Support Boardschiocco · support board · CWE-89 SQL injection	High8.7	—	0.3%	Mar 25, 2026
32Monitor	CVE-2021-24823No exploit	Support Board < 3.3.6 - Arbitrary File Deletion via CSRFschiocco · support board · CWE-352 Pre-auth CSRF	High8.1	—	0.5%	Feb 28, 2022
21Monitor	CVE-2021-24807Proof of concept	Support Board < 3.3.5 - Agent+ Stored Cross-Site Scriptingschiocco · support board · CWE-79 XSS	Medium5.4	—	1.4%	Nov 8, 2021
21Monitor	CVE-2018-18373No exploit	In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file uploschiocco · support board - chat and help desk · CWE-79 XSS	Medium5.4	—	0.7%	Oct 17, 2018
19Monitor	CVE-2026-4816No exploit	Reflected Cross Site Scripting (XSS) vulnerability in Support Boardschiocco · support board · CWE-79 XSS	Medium4.8	—	0.1%	Mar 25, 2026

CVE-2021-24741
41Plan
Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections
CriticalCVSS 9.8Proof of conceptEPSS 5%
- Pre-auth
- SQL injection
schiocco · support board - chat and help deskSep 20, 2021
CVE-2025-4828
39Monitor
Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Path traversal
schiocco · support boardJul 8, 2025
CVE-2025-4855
39Monitor
Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
schiocco · support boardJul 8, 2025
CVE-2026-4815
34Monitor
SQL Injection vulnerability in Support Board
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
schiocco · support boardMar 25, 2026
CVE-2021-24823
32Monitor
Support Board < 3.3.6 - Arbitrary File Deletion via CSRF
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- CSRF
schiocco · support boardFeb 28, 2022
CVE-2021-24807
21Monitor
Support Board < 3.3.5 - Agent+ Stored Cross-Site Scripting
MediumCVSS 5.4Proof of conceptEPSS 1%
- XSS
schiocco · support boardNov 8, 2021
CVE-2018-18373
21Monitor
In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file uplo
MediumCVSS 5.4No exploitEPSS 0%
- XSS
schiocco · support board - chat and help deskOct 17, 2018
CVE-2026-4816
19Monitor
Reflected Cross Site Scripting (XSS) vulnerability in Support Board
MediumCVSS 4.8No exploitEPSS 0%
- XSS
schiocco · support boardMar 25, 2026