CVE-2026-73531

The CVE concerns django-helpdesk prior to 2.3.3, where a stored XSS vulnerability exists via HTML attachments or HTML-formatted emails submitted through public ticket channels. The root cause is insufficient sanitization and insecure Content-Disposition handling at the attachment-serving layer, e...