Customer support system

This hub aggregates every CVE we track for Customer support system, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Customer support system.

• CVE-2025-70141SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking admin...9.4Feb 18, 2026
• CVE-2025-40729Reflected Cross-Site Scripting (XSS) vulnerability in Customer Support System6.1Jun 16, 2025
• CVE-2025-40728SQL injection vulnerability in Customer Support System8.8Jun 16, 2025
• CVE-2023-51281Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address p...5.4Mar 7, 2024
• CVE-2023-49973A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /custom...6.1Mar 6, 2024
• CVE-2023-49971A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /cu...6.1Mar 6, 2024
• CVE-2023-49977A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /cust...5.4Mar 6, 2024
• CVE-2023-49978Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.8.8Mar 6, 2024
• CVE-2023-49976A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /cust...5.4Mar 6, 2024
• CVE-2023-49974A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /cust...6.1Mar 6, 2024
• CVE-2023-49548Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user.8.8Mar 4, 2024
• CVE-2023-49969Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer.4.3Mar 4, 2024
• CVE-2023-49970Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket.9.8Mar 4, 2024
• CVE-2023-49546Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer_support/ajax.php.8.8Mar 4, 2024
• CVE-2023-49968Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php.7.3Mar 4, 2024