9.8
CVE-2024-43274
- EPSS 0.44%
- Veröffentlicht 01.11.2024 15:15:44
- Zuletzt bearbeitet 26.01.2026 17:41:37
- Quelle audit@patchstack.com
- CVE-Watchlists
- Unerledigt
WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Joomsky ≫ Js Help Desk SwPlatformwordpress Version < 2.8.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.347 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| audit@patchstack.com | 5.8 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-the-ultimate-help-desk-support-plugin-plugin-2-8-6-broken-access-control-vulnerability?_s_id=cve