CVE-2022-46838

Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions prior to 2.7.1

Description The issue affects the JS Help Desk – Best Help Desk & Support Plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This vulnerability enables unauthenticated settings changes.

Recommendations For versions prior to 2.7.1, update to version 2.7.1 or later to secure your site. As a temporary workaround, consider restricting access to settings changes until the update is applied.