CVE-2015-4075: Helpdeskpro Helpdesk Pro

High severity, CVSS 8.1. EPSS: 7.4% chance of exploitation in the next 30 days.

The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task.

Affected products

• Helpdeskpro Helpdesk Pro: up to and including 1.3.0

Published 2017-09-20. Last modified 2026-06-17.