All verified exploits

CVE-2023-50839 Unauthenticated SQL Injection

Deterministic critical JS Help Desk Added cve-verified-cve-2023-50839

Detects time-based blind SQL injection in the JS Help Desk WordPress plugin's ticket status endpoint. The plugin's base64 token is decoded and injected directly into SQL without sanitization.

Is your app exploitable through CVE-2023-50839?

Scan your domain free