Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

JS Help Desk – AI-Powered Support & Ticketing System — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in JS Help Desk – AI-Powered Support & Ticketing System, with AI-generated Chinese analysis, references, and POCs.

Vendor: rabilal

CVE IDTitleCVSSSeverityPublished
CVE-2026-2511 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter CWE-89 7.5 High2026-03-26
CVE-2023-7337 JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie CWE-89 7.5 High2026-03-04
CVE-2024-13606 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CWE-200 7.5 High2025-02-13
CVE-2024-13607 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference CWE-639 4.3 Medium2025-02-04
CVE-2024-7094 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution CWE-94 9.8 Critical2024-08-13

All 5 known CVE vulnerabilities affecting JS Help Desk – AI-Powered Support & Ticketing System with full Chinese analysis, references, and POCs where available.