Login Request a demo
CS
Product
Customer Support System
by Oretnom23 · last CVE Feb 18, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 3High 7Medium 9Low 0
Severity
All severities19Critical3High7Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Customer Support System to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-40729
6.1
0%
Jun 16
Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter
Affected: 1.0
CVE-2023-49974
6.1
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact…
Affected: 1.0
CVE-2023-49973
6.1
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email…
Affected: 1.0
CVE-2023-49971
6.1
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
Affected: 1.0
CVE-2023-51281
5.4
0%
Mar 7
Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename",…
Affected: 1.0
CVE-2023-49977
5.4
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address…
Affected: 1.0
CVE-2023-49976
5.4
0%
Mar 6
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject…
Affected: 1.0
CVE-2023-49544
4.9
1%
Mar 1
A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unauthorized acces via manipulation of the page= parameter at…
Affected: 1.0
CVE-2023-49969
4.3
1%
Mar 5
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer
Affected: 1.0
Showing 9