CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
What the vulnerability does
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
Explanation of Vulnerability in Simple Terms
JS Help Desk versions up to 2.7.1 lack proper authorization checks, allowing unauthenticated attackers to modify or delete data on affected sites. The vulnerability requires no special access or user interaction. Site administrators should update immediately to a version newer than 2.7.1.
What an attacker can do
Modify or delete help desk data without logging in.
Potential impact on your site
Attackers can corrupt or destroy help desk tickets and support data without any credentials.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
