Skip to content
OpenAdvisories

Vendor

helpyio

2 known vulnerabilities.

Products

helpy 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-40230

    Helpy 2.8.0 - Stored XSS in knowledgebase Doc body rendering

    Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or JavaScript in the body field of a knowledge base Doc.This issue…

    helpyio helpy
  • Medium 5.1
    CVE-2026-40229

    Helpy 2.8.0 - Stored XSS in post author display via PostsHelper

    Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered unescaped in public forum threads where they participate, in th…

    helpyio helpy