CVE-2023-7337

🗓️ 04 Mar 2026 09:24:29Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 58 Views

CVE-2023-7337: Unauthenticated SQL injection in JS Help Desk 2.8.2 via cookie enables data extraction.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2023-7337	4 Mar 202609:24	–	attackerkb
CNNVD	WordPress plugin JS Help Desk – AI-Powered Support & Ticketing System SQL注入漏洞	4 Mar 202600:00	–	cnnvd
Cvelist	CVE-2023-7337 JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie	4 Mar 202609:24	–	cvelist
EUVD	EUVD-2023-60537	4 Mar 202612:30	–	euvd
Nuclei	JS Help Desk <= 2.8.2 - SQL Injection	22 Jun 202605:20	–	nuclei
NVD	CVE-2023-7337	4 Mar 202610:16	–	nvd
Patchstack	WordPress JS Help Desk - AI-Powered Support & Ticketing System plugin 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie vulnerability	4 Mar 202606:46	–	patchstack
Positive Technologies	PT-2026-22897	4 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2023-7337	5 Mar 202613:40	–	redhatcve
Vulnrichment	CVE-2023-7337 JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie	4 Mar 202609:24	–	vulnrichment

Vulners

Node

rabilal js_help_desk_ai-powered_support_&_ticketing_systemRange≤2.8.2wordpress

[
  {
    "vendor": "rabilal",
    "product": "JS Help Desk – AI-Powered Support & Ticketing System",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.8.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b841531b-8728-4933-b3c4-d4e10cbdca79
plugins	www.plugins.trac.wordpress.org/changeset

17 Jun 2026 06:52Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.01317

SSVC

CWE-89