CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.
Explanation of Vulnerability in Simple Terms
JS Help Desk contains a SQL injection vulnerability in versions up to 2.8.1 that allows unauthenticated attackers to query the database directly. An attacker can extract sensitive data including user credentials and support ticket information. The vulnerability requires no user interaction and can be exploited over the network.
What an attacker can do
Extract sensitive data from the database, including user credentials and support ticket information.
Potential impact on your site
Attackers can read all database contents without logging in, compromising user data and support ticket confidentiality.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
