Skip to content
OpenAdvisories

Vendor

django-helpdesk

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    django-helpdesk < 2.3.3 Stored XSS via HTML Attachments

    django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket s…