8.6
High
CVE-2025-30878 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JS Help Desk 2.9 | earliest → 2.9.2 | No fix stated |
Other CVEs of JS Help Desk
The 10 CVEs of JS Help Desk →
CVE-2026-57652
Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions
5.3
Medium
CVE-2026-32535
Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows…
6.5
Medium
CVE-2026-32534
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
8.5
High
CVE-2026-24959
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help…
8.5
High