Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-51670 EUVD-2024-45472GHSA-4998-4cwm-v6xh

WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.

Affected products

VendorProductAffectedFixed
JoomSky JS Help Desk ≤ 2.8.7 —

References