CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.
Explanation of Vulnerability in Simple Terms
JS Help Desk versions up to 2.7.7 allow high-privilege users to upload files without proper validation. An attacker with admin or elevated permissions can upload malicious files that may execute on the server or be accessed by other users. This can lead to unauthorized code execution, data theft, or site compromise. Update to a version newer than 2.7.7.
What an attacker can do
Upload and execute malicious files on the server, or make uploaded files accessible to other users.
Potential impact on your site
A compromised admin account could upload malicious code, leading to full site takeover or data breach.
Conditions required to exploit
Attacker must have high-level admin or privileged account access to the plugin.
Key dates
External resources
Related vulnerabilities
