CVE-2018-6007

PoC ×2—

CVSS 3.0

8.8 high

EPSS

2%p82

Published

Jan 29, 2018 (Jan 29, 2018)

Modified

Jun 17, 2026

Description

CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.

Vendors: joomsky
Products: js support ticket
Ecosystems: Joomla
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.