134 matches found
CVE-2023-7337
The JS Help Desk – AI-Powered Support & Ticketing System WordPress plugin (v2.8.2) is vulnerable to SQL Injection via the js-support-ticket-token-tkstatus cookie. This stems from an incomplete fix for CVE-2023-50839, leaving a second sink with insufficient escaping and inadequate preparation on t...
CVE-2023-7337 JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie
The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in version 2.8.2 due to an incomplete fix for CVE-2023-50839 where a second sink was left with insufficient escaping on the user supplied...
CVE-2026-24959
CVE-2026-24959 is a SQL Injection in WordPress plugin JS Help Desk (js-support-ticket) , with root cause described as improper neutralization of special elements in SQL queries. Affected software: JS Help Desk versions up to and including 3.0.1. Public sources (Patchstack, Red Hat, CIRCL/CVE feed...
CVE-2023-25444
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7...
EUVD-2022-49619
Malicious code in bioql PyPI...
EUVD-2023-27766
Malicious code in bioql PyPI...
EUVD-2022-49623
Malicious code in bioql PyPI...
EUVD-2025-9081
Malicious code in bioql PyPI...
EUVD-2025-9076
Malicious code in bioql PyPI...
EUVD-2025-9075
Malicious code in bioql PyPI...
EUVD-2024-29169
Malicious code in bioql PyPI...
EUVD-2025-9079
Malicious code in bioql PyPI...
EUVD-2024-51689
Malicious code in bioql PyPI...
EUVD-2023-55572
Malicious code in bioql PyPI...
EUVD-2022-49620
Malicious code in bioql PyPI...
EUVD-2025-9084
Malicious code in bioql PyPI...
EUVD-2022-49621
Malicious code in bioql PyPI...
EUVD-2024-40166
Malicious code in bioql PyPI...