PatchTheCVEjs help desk vulnerabilities and fixes
Recent CVEs affecting js help desk, with upgrade or downgrade steps. 11 tracked.
Also searched as: jshelpdesk.
js help desk has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-04-01. Highest priority: CVE-2022-46838 (score 50/100).
- CVE-2025-30901 HIGH 8.1 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-30886 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky
- CVE-2025-30882 HIGH 7.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Hel
- CVE-2025-30880 HIGH 7.5 UPGRADE Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Co
- CVE-2025-30878 HIGH 8.6 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Hel
- CVE-2024-51670 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky
- CVE-2024-43274 MEDIUM 5.8 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Acce
- CVE-2024-31273 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue
- CVE-2024-13606 HIGH 7.5 UPGRADE The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Inf
- CVE-2022-46840 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Expl
- CVE-2022-46838 CRITICAL 9.1 UPGRADE Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Expl
FAQ
How do I fix js help desk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is js help desk being exploited right now?
None of the tracked js help desk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which js help desk CVE should I patch first?
CVE-2022-46838 currently ranks highest (50/100): Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Expl.