Volerion logoVolerion
Volerion logoVolerion

JoomSky JS Help Desk Missing Authorization Vulnerability Allowing Broken Access Control

Vulnerability

A missing authorization vulnerability has been identified in the JoomSky JS Help Desk plugin, specifically in versions through 2.9.2. This vulnerability allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions by users with lower privileges.

Impact

Exploitation of this vulnerability could allow users to bypass access controls and perform actions reserved for higher-privileged users.

Remediation

Users of the JoomSky JS Help Desk plugin should update to version 2.9.3 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
5.0
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.