Advisories · Technology
JoomSky JS Help Desk.
Every CVE that names JoomSky JS Help Desk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability
- JoomSky JS Help Desk
- Broken access control
- CVSS 6.5 Medium
WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability
- JoomSky JS Help Desk
- Broken access control
- CVSS 8.5 High
WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability
- JoomSky JS Help Desk
- SQL injection
- CVSS 8.5 High
WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability
- JoomSky JS Help Desk
- SQL injection
- CVSS 8.1 High
WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability
- JoomSky JS Help Desk
- File inclusion
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability
- JoomSky JS Help Desk
- SQL injection
- CVSS 7.5 High
WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability
- JoomSky JS Help Desk
- Path traversal
- CVSS 7.5 High
WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability
- JoomSky JS Help Desk
- Broken access control
- CVSS 8.6 High
WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability
- JoomSky JS Help Desk
- Path traversal
- CVSS 5.9 Medium
WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability
- JoomSky JS Help Desk
- Cross-site scripting (XSS)