CVE-2023-25444
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published May 17, 2024
CWE ID 434
Summary
CVE-2023-25444 represents a critical vulnerability in JS Help Desk – Best Help Desk & Support Plugin. Malicious actors can exploit this Unrestricted File Upload vulnerability to upload dangerous file types, potentially leading to serious security risks. Impacting versions of the plugin from n/a to 2.7.7, this issue permits users to upload arbitrary files without any restrictions. This vulnerability could result in data breaches, unauthorized access, or the execution of malicious code. Users are urged to apply the necessary patches to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.