CVE-2025-30882: falha de alta gravidade em JoomSky JS Help Desk
WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.6%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
JoomSky · JS Help DeskCVEs relacionadas — JoomSky JS Help Desk
No mesmo produto, das mais perigosas para as menos.
CVE-2025-30901HIGHWordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerabilityEPSS 0.9%CVE-2025-30878HIGHWordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerabilityEPSS 0.6%CVE-2025-30886CRITICALWordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerabilityEPSS 0.5%CVE-2025-30880HIGHWordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-57652MEDIUMWordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2024-51670MEDIUMWordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%