Medium
CVE-2026-103079
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 35
Reset filters
Medium
CVE-2026-103078
JS Help Desk – AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-14928
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-14931
JS Help Desk <= 3.1.3 - Authenticated (Contributor+) User Email Disclosure
Medium
CVE-2026-14929
JS Help Desk <= 3.1.3 - Missing Authorization to Authenticated (Subscriber+) Ticket Reply Modification
Medium
CVE-2026-15209
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Cross-User Support Ticket Disclosure
Medium
CVE-2026-14930
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Unauthenticated Arbitrary Media Upload
Medium
CVE-2026-57652
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-56054
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-48886
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection
Medium
CVE-2026-48887
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization
High
CVE-2026-2511
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter
Medium
CVE-2026-32535
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-32534
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-7337
JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie
Medium
CVE-2026-24959
JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-30878
JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-30882
JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-30901
JS Help Desk <= 2.9.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-30880
JS Help Desk <= 2.9.2 - Missing Authorization
High
CVE-2025-30886
JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection
High
CVE-2024-13606
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-13607
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2024-51670
JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.