JS Help Desk
JoomSky
Developer
5.0.4
Latest version
7,000
Installations
No date
Last updated
Vulnerability history
0 present
37 patched
24 Mitigation rules
- Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability<= 5.0.25 hours ago
- Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion vulnerability<= 5.0.17 days ago
- Insecure Direct Object References (IDOR) vulnerability<= 4.0.005/10/2026
- Insecure Direct Object References (IDOR) vulnerability<= 4.0.005/10/2026
- Unauthenticated Arbitrary Ticket File Attachment Upload vulnerability< 3.1.404/08/2026
- Subscriber+ Sensitive Information Disclosure vulnerability< 3.1.404/08/2026
- Contributor+ User Email Disclosure vulnerability< 3.1.431/07/2026
- Subscriber+ Cross-User Support Ticket Disclosure vulnerability< 3.1.531/07/2026
- Subscriber+ Ticket Reply Modification vulnerability< 3.1.431/07/2026
- Insecure Direct Object References (IDOR) vulnerability<= 3.1.026/06/2026
- Arbitrary File Deletion vulnerability<= 3.1.125/06/2026
- Broken Access Control vulnerability<= 3.0.902/06/2026
- SQL Injection vulnerability<= 3.0.902/06/2026
- WordPress JS Help Desk - AI-Powered Support & Ticketing System plugin <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter vulnerability<= 3.0.430/03/2026
- Insecure Direct Object References (IDOR) vulnerability<= 3.0.323/03/2026
- SQL Injection vulnerability<= 3.0.320/03/2026
- WordPress JS Help Desk - AI-Powered Support & Ticketing System plugin 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie vulnerability<= 2.8.204/03/2026
- SQL Injection vulnerability<= 3.0.111/02/2026
- Broken Access Control vulnerability<= 2.9.227/03/2025
- SQL Injection vulnerability<= 2.9.227/03/2025
- Arbitrary File Download vulnerability<= 2.9.127/03/2025
- Arbitrary File Deletion vulnerability<= 2.9.227/03/2025
- Local File Inclusion vulnerability<= 2.9.227/03/2025
- Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability<= 2.8.812/02/2025
- Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability<= 2.8.803/02/2025
- Stored Cross Site Scripting (XSS) vulnerability<= 2.8.701/11/2024
- Unauthenticated Remote Code Execution vulnerability<= 2.8.612/08/2024
- Broken Access Control vulnerability<= 2.8.612/08/2024
- Broken Access Control vulnerability<= 2.8.305/04/2024
- Unauthenticated SQL Injection vulnerability<= 2.8.121/12/2023
- Arbitrary File Upload vulnerability<= 2.7.717/08/2023
- IDOR Leading To Ticket Deletion vulnerability<= 2.7.720/06/2023
- Broken Access Control<= 2.7.127/01/2023
- Arbitrary File Upload Vulnerability<= 2.7.127/01/2023
- Unauthenticated Settings Change Vulnerability<= 2.7.127/01/2023
- Multiple Cross Site Request Forgery (CSRF) Vulnerabilities<= 2.7.127/01/2023
- Unauthenticated SQL Injection Vulnerability<= 2.7.127/01/2023