Joomsky

Js Help Desk

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-57652

  • EPSS 0.18%
  • Veröffentlicht 26.06.2026 14:53:22
  • Zuletzt bearbeitet 26.06.2026 16:16:35

Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.

8.5

CVE-2026-32534

  • EPSS 0.22%
  • Veröffentlicht 25.03.2026 16:15:10
  • Zuletzt bearbeitet 24.04.2026 16:35:20

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.3.

6.5

CVE-2026-32535

  • EPSS 0.16%
  • Veröffentlicht 25.03.2026 16:15:10
  • Zuletzt bearbeitet 29.04.2026 10:17:21

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 3.0.3.

8.5

CVE-2026-24959

  • EPSS 0.22%
  • Veröffentlicht 20.02.2026 15:47:09
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.1.

7.5

CVE-2025-30882

  • EPSS 0.57%
  • Veröffentlicht 01.04.2025 06:15:54
  • Zuletzt bearbeitet 23.04.2026 15:27:15

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.

10

CVE-2025-30886

  • EPSS 0.5%
  • Veröffentlicht 01.04.2025 06:15:54
  • Zuletzt bearbeitet 23.04.2026 15:27:15

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2.

8.1

CVE-2025-30901

  • EPSS 0.82%
  • Veröffentlicht 01.04.2025 06:15:54
  • Zuletzt bearbeitet 23.04.2026 15:27:17

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2...

9.1

CVE-2025-30878

  • EPSS 0.6%
  • Veröffentlicht 01.04.2025 06:15:53
  • Zuletzt bearbeitet 23.04.2026 15:27:14

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.

7.5

CVE-2025-30880

  • EPSS 0.47%
  • Veröffentlicht 01.04.2025 06:15:53
  • Zuletzt bearbeitet 23.04.2026 15:27:15

Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.

9.1

CVE-2022-46838

  • EPSS 0.7%
  • Veröffentlicht 13.12.2024 15:15:09
  • Zuletzt bearbeitet 28.04.2026 19:19:07

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a thr...