django-helpdesk vulnerabilities

Products

• django-helpdesk/django-helpdesk 3
• django-helpdesk/django-helpdesk 1

Latest django-helpdesk CVEs

Newest publication first

1. CVE-2026-73531 django-helpdesk < 2.3.3 Stored XSS via HTML Attachments

   Published 2026-08-13

   Medium·CVSS 5.3 EPSS 0.29%

   django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. A...

2. CVE-2021-3994 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk

   Published 2021-12-01

   Critical·CVSS 9.6 EPSS 1.4%

   django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

3. CVE-2021-3950 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk

   Published 2021-11-19

   Medium·CVSS 5.4 EPSS 0.80%

   django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

4. CVE-2021-3945 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk

   Published 2021-11-13

   Medium·CVSS 6.1 EPSS 1.0%

   django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.