CVE-2026-4816

Medium

Description

A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the 'search' parameter in '/supportboard/include/articles.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.

SeverityMedium

CVSS5.4

Exploit probability—

ProductSchiocco Support Board

PublishedMar 25, 2026

First seenMar 25, 2026

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update

schiocco support_board3.7.8 or later

Patches

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-support-board-schiocco

Affected products

Product	Affected versions	Fixed in
schiocco support_board	v < 3.7.8	3.7.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.