Lucene search

K

6 matches found

CVE
CVE
added 2024/08/13 3:15 a.m.49 views

CVE-2024-7094

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This is due to a lack of sanitization on user-supplied values, which replac...

9.8CVSS10AI score0.44429EPSS
CVE
CVE
added 2025/02/13 10:15 a.m.48 views

CVE-2024-13606

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored ...

7.5CVSS6.5AI score0.00049EPSS
CVE
CVE
added 2024/06/09 12:15 p.m.39 views

CVE-2024-31273

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

9.8CVSS5.7AI score0.0029EPSS
CVE
CVE
added 2023/02/02 9:22 p.m.37 views

CVE-2022-46842

Cross-Site Request Forgery (CSRF) vulnerability in JS Help Desk plugin

8.8CVSS7.2AI score0.00051EPSS
CVE
CVE
added 2023/12/28 8:16 p.m.36 views

CVE-2023-50839

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.

9.8CVSS9.8AI score0.00308EPSS
CVE
CVE
added 2024/01/05 11:15 a.m.32 views

CVE-2022-46839

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

10CVSS9.3AI score0.00313EPSS