Js Help Desk Ai Powered Support Ticketing System
Monthly
Unauthenticated SQL injection in JS Help Desk WordPress plugin versions up to 3.0.4 allows remote attackers to extract sensitive database information via the multiformid parameter in the storeTickets() function. The vulnerability exploits improper use of esc_sql() without SQL quote encapsulation, enabling injection of additional SQL queries without requiring quote characters. CVSS scored 7.5 (High) with no public exploit identified at time of analysis and SSVC assessment indicates automatable exploitation with partial technical impact.
Arbitrary file deletion in the JS Help Desk WordPress plugin through 5.0.1 allows authenticated administrator-level users to remove arbitrary server files through a two-step path-traversal sequence in the setSupportCustomImage() code path. The attacker first saves a traversal-crafted value in the support_custom_img configuration field and then triggers deletion by uploading a new support custom image; deleting a critical file such as wp-config.php can lead to remote code execution. The independent assessment places this as a moderate, non-urgent priority, with no CISA KEV entry and no public exploit identified at time of analysis.
Unauthenticated SQL injection in JS Help Desk WordPress plugin versions up to 3.0.4 allows remote attackers to extract sensitive database information via the multiformid parameter in the storeTickets() function. The vulnerability exploits improper use of esc_sql() without SQL quote encapsulation, enabling injection of additional SQL queries without requiring quote characters. CVSS scored 7.5 (High) with no public exploit identified at time of analysis and SSVC assessment indicates automatable exploitation with partial technical impact.
Arbitrary file deletion in the JS Help Desk WordPress plugin through 5.0.1 allows authenticated administrator-level users to remove arbitrary server files through a two-step path-traversal sequence in the setSupportCustomImage() code path. The attacker first saves a traversal-crafted value in the support_custom_img configuration field and then triggers deletion by uploading a new support custom image; deleting a critical file such as wp-config.php can lead to remote code execution. The independent assessment places this as a moderate, non-urgent priority, with no CISA KEV entry and no public exploit identified at time of analysis.