CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
Explanation of Vulnerability in Simple Terms
JS Help Desk versions up to 2.8.6 lack proper authorization checks, allowing unauthenticated attackers to read sensitive information. The vulnerability affects the plugin's core functionality and can be exploited remotely without user interaction. Site administrators should update to a version newer than 2.8.6 immediately.
What an attacker can do
Read sensitive information from the help desk system without logging in.
Potential impact on your site
Confidential support tickets, user data, or internal communications may be exposed to the public.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
