CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
Explanation of Vulnerability in Simple Terms
JS Help Desk versions up to 2.7.1 lack proper authorization checks, allowing authenticated users to read and modify data they should not have access to. An attacker with a low-privilege account can view or alter support tickets, user information, or other sensitive content without restriction. The vulnerability requires a valid login but no special privileges or user interaction beyond normal site access.
What an attacker can do
Read and modify support tickets and user data belonging to other accounts.
Potential impact on your site
Support tickets and user information may be exposed to or altered by unauthorized account holders.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
