5.9
Medium
CVE-2024-51670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JS Help Desk – Best Help Desk & Support Plugin 2.8 | earliest → 2.8.7 | No fix stated |
| JS Help Desk 2.8 | earliest → 2.8.7 | No fix stated |
Other CVEs of JS Help Desk – Best Help Desk & Support Plugin
The 9 CVEs of JS Help Desk – Best Help Desk & Support Plugin →
CVE-2022-46838
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting…
9.1
Critical
CVE-2022-46840
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting…
5.4
Medium
CVE-2024-43274
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing…
5.8
Medium
CVE-2024-31273
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS…
5.3
Medium