js_help_desk_ai-powered_support_ticketing_system vulnerabilities
CVEs whose affected-version data names the js_help_desk_ai-powered_support_ticketing_system package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-118046Medium· 6.4JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title
The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'jsticket_message' parameter in all versions up to, and including, 5.0.2 due to insufficient inp…
▾ Sunlitrabilal · JS Help Desk – AI-Powered Support & Ticketing SystemEPSS 0.20%via CVEORG
CVE-2026-104739Medium· 4.9JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter
The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5…
▾ Sunlitrabilal · JS Help Desk – AI-Powered Support & Ticketing SystemEPSS 0.79%via CVEORG