CVE-2025-30878: WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30878?
CVE-2025-30878 is considered a critical vulnerability due to its potential for path traversal attacks that can lead to unauthorized access to the filesystem.
How do I fix CVE-2025-30878?
To fix CVE-2025-30878, upgrade JoomSky JS Help Desk to the latest version beyond 2.9.2 that addresses this vulnerability.
What versions of JS Help Desk are affected by CVE-2025-30878?
CVE-2025-30878 affects JoomSky JS Help Desk versions from release through 2.9.2 inclusive.
What is the impact of CVE-2025-30878?
The impact of CVE-2025-30878 allows attackers to perform a path traversal which can expose sensitive files on the server.
Where can I find more information about CVE-2025-30878?
More information regarding CVE-2025-30878 can be found in the official security advisories and vulnerability databases.