Skip to content
OpenAdvisories

Vendor

rabilal

8 known vulnerabilities.

Products

JS Help Desk – AI-Powered Support & Ticketing System 7 WP Learn Manager 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-118046

    JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title

    The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'jsticket_message' parameter in all versions up to, and including, 5.0.2 due to insufficient input sanitization and ou…

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS
  • Medium 4.9
    CVE-2026-104739

    JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter

    The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it po…

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS
  • Medium 4.3
    CVE-2024-13607

    JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference

    The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. …

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS