JoomSky JS Help Desk Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the JoomSky JS Help Desk plugin for WordPress, affecting versions through 2.9.2. This vulnerability allows for arbitrary file deletion, which could lead to the removal of critical files from a website, potentially causing the site to malfunction.

Impact

Exploitation of this vulnerability could result in the deletion of arbitrary files from the affected WordPress site. If core files are removed, it could disrupt the site's functionality and cause it to break.

Remediation

Users of the JoomSky JS Help Desk plugin should update to version 2.9.3 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.