Known vulnerabilities in JS Support Ticket

Vendor: Joom Sky
Software CPE: cpe:2.3:a:rabilal:js-support-ticket:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JS Support Ticket JS Support Ticket is affected by 4 known vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20555 - Cross-Site Request Forgery (CSRF)
CVE-2018-21002
CWE-352 Medium
No
No
2.0.6 02.09.2019 SB2018062515
#VU20056 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
1.1.7 12.08.2019 SB2019081206
#VU20055 - Cross-Site Request Forgery (CSRF)
CVE-2018-6007
CWE-352 Medium
Available
No
1.1.1 12.08.2019 SB2018012922
#VU20054 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
1.1.6 12.08.2019 SB2019081205