Vendor
django-helpdesk
4 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 6.1
django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket s…