| Package | Affected versions | Patched versions |
|---|---|---|
| helpdesk pro | ≤ 1.3.0 |
The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http://{target}/component/helpdeskpro/?view=ticket&id={ticketId}.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free