rabilal has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.7 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-118046Medium· 6.4JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title35CVE-2026-104739Medium· 4.9JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter27
rabilal vulnerabilities
CVEs affecting rabilal, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-118046Medium· 6.4JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title
The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'jsticket_message' parameter in all versions up to, and including, 5.0.2 due to insufficient inp…
▾ Sunlitrabilal · JS Help Desk – AI-Powered Support & Ticketing SystemEPSS 0.20%via CVEORG
CVE-2026-104739Medium· 4.9JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter
The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5…
▾ Sunlitrabilal · JS Help Desk – AI-Powered Support & Ticketing SystemEPSS 0.79%via CVEORG