PT-2026-21238 · Joomsky · Joomsky Js Help Desk

Bonds · CVE-2026-24959 · Publicado 2026-02-20 · Atualizado 2026-02-21

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions JoomSky JS Help Desk versions through 3.0.1

Description A flaw exists in JoomSky JS Help Desk js-support-ticket that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially allow an attacker to extract data from the database.

Recommendations Update JoomSky JS Help Desk to a version later than 3.0.1.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-24959

Produtos afetados

Joomsky Js Help Desk

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24959 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2024893874888450360 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-plugin-3-0-1-sql-injection-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2025154208421351618 · Publicação no Twitter
• https://t.me/CVEtracker/45285 · Publicação no Telegram