1443 matches found
PT-2021-22779
Name of the Vulnerable Software and Affected Versions django-helpdesk affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for the injection of malicious scripts into web...
CVE-2021-3994: Improper Neutralization of Input During Web Page Generation
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
django-helpdesk跨站脚本漏洞
Django-Helpdesk is a Django application. It is used to manage internal helpdesk tickets. Django-Helpdesk suffers from a cross-site scripting vulnerability that can be exploited by an attacker to perform cross-site scripting attacks...
Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-VFRC-GGMC-5JWV Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-431
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-431
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
The CVE-2021-3950 entry describes a stored Cross-site Scripting (XSS) vulnerability in django-helpdesk caused by improper neutralization of input during Web Page Generation. Affected component/file is django-helpdesk, and exploitation could allow arbitrary JavaScript execution in a victim’s brows...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
Description Stored XSS via Markdown at Description or Comment of Ticket Detail When rendering to Markdown, the application does not filter and check the properties are valid, so when the user enters XSS it will render as XSS . Proof of Concept // PoC.req POST /tickets/submit/ HTTP/1.1 Host:...
PT-2021-22595
Name of the Vulnerable Software and Affected Versions: django-helpdesk affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize us...
CVE-2021-3950: Improper Neutralization of Input During Web Page Generation
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Django-helpdesk跨站脚本漏洞
Django-Helpdesk is a Django application. It is used to manage internal helpdesk tickets. A cross-site scripting vulnerability exists in Django-helpdesk that stems from the product's web generation page not validating input data. An attacker can use this vulnerability to cause client-side code...
Django-Helpdesk Cross-Site Scripting Vulnerability
Django-Helpdesk is a Django application. A cross-site scripting vulnerability exists in Django-Helpdesk, which stems from a lack of effective filtering and escaping of user input during Web page generation in django-helpdesk. An attacker could exploit this vulnerability to insert malicious code...