CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
Explanation of Vulnerability in Simple Terms
JS Help Desk contains a SQL injection vulnerability in versions up to 2.7.1. An attacker can send a crafted request to extract or modify database contents without authentication. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update immediately to a patched version.
What an attacker can do
Extract sensitive data from the database or modify database records without logging in.
Potential impact on your site
Attackers can read user data, modify support tickets, or compromise site integrity without any credentials.
Conditions required to exploit
Network access to the plugin; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
