VulnSocial

CVE-2026-4816Disclosure(schiocco / support_board)

LOWCVSS 5.4 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the 'search' parameter in '/supportboard/include/articles.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.

schiocco CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • support_board

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-03-27)
  • 3 total mentions across 2 days

Affected systems

Vendors
schiocco
Products
support_board

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-25: 1Mentions · 2026-03-27: 2Technical Details · 2026-03-25: 1Technical Details · 2026-03-27: 103-2503-27
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-251
Disclosure1
2026-03-272
Disclosure1General1
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4816 Reflected XSS Vulnerability in Support Board v3.7.7 via 'search' Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4816

    Post summary

    The text announces a reflected XSS vulnerability in Support Board v3.7.7 affecting the 'search' parameter, offering technical details but no PoC, exploit code, patch reference, or evidence of active exploitation.

    0000055
    4.0K followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-4816 📊 Severity: 4.8 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4816 #CVE-2026-4816 #CVE #Medium  #CyberSecurity #InfoSec https://t.co/nWTq3jsL0c

    Post summary

    A brief Verizon-like CVE alert provides only the CVE ID, severity rating, and a link to the NVD entry, with no in-depth technical or mitigation details.

    0000025
    123 followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4816 - Reflected Cross Site Scripting (XSS) vulnerability in Support Board Intel Report: https://ift.tt/RjKiHTB

    Post summary

    The alert announces the discovery of CVE‑2026‑4816, a reflected XSS in Support Board, but provides no proof of concept, exploit, or mitigation details.

    0000037
    286 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appschioccosupport_board-wordpress-

Explore more

Back to dashboardschiocco CVEssupport_board vulnerabilities