EUVD-2023-12418

Malicious code in bioql PyPI...

EUVD-2025-25813

Malicious code in bioql PyPI...

CVE-2025-52184

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...

PT-2025-34794 · Helpy.Io · Helpy.Io

Name of the Vulnerable Software and Affected Versions: Helpy.io version 2.8.0 Description: A Cross Site Scripting issue exists in Helpy.io version 2.8.0. This allows a remote attacker to escalate privileges through the New Topic Ticket function. Recommendations: Update to a newer version that...

CVE-2025-52184

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...

CVE-2025-52184

A Cross-Site Scripting (XSS) vulnerability exists in Helpy.io version 2.8.0 , a self-hosted customer service platform. The flaw is located within the New Topic Ticket function and allows a remote attacker to escalate privileges . To mitigate this risk, users are recommended to update to a newer v...

CVE-2025-52184

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...

CVE-2023-0357

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket...

CVE-2018-20851

Helpy before 2.2.0 allows agents to edit admins...

CVE-2023-0357

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket...

Code injection

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket...

CVE-2023-0357: Improper Neutralization of Input During Web Page Generation

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket...

CVE-2023-0357

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket...

PT-2023-16209 · Helpy · Helpy

Name of the Vulnerable Software and Affected Versions: Helpy version 2.8.0 Description: The issue allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the attachments sent by customers in the...

CVE-2023-0357

CVE-2023-0357 concerns Helpy 2.8.0, where an unauthenticated remote attacker can exploit a stored XSS vulnerability by abusing how attachments to tickets are validated. The issue is caused by improper validation of customer attachments, enabling injection of script content that persists in the ap...

Helpy cross-site scripting vulnerabilities

Helpy is an open source customer support application. The program includes features such as a knowledge base, community discussions, and email. A security vulnerability exists in Helpy version 2.8.0, which stems from the application not properly validating attachments sent by customers in work...

CVE-2023-0357

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket...

WS-2022-0083

Helpy application in versions 1.0 to 2.8.0 is affected by Stored XSS vulnerability, where an unprivileged user can upload an HTML file that contains malicious JavaScript while creating a ticket...

WS-2022-0082

Helpy application in versions 1.0 to 2.8.0 is affected by Stored XSS vulnerability, where an unprivileged user can upload an SVG file that contains malicious JavaScript while creating a ticket...

WS-2022-0077

Helpy application versions 2.1.0 to 2.8.0 are vulnerable to Stored XSS in Delete user and Anonymize User functionalities. A low privileged user can inject JavaScript payload in the name field from his profile. When the admin visits the users page and takes an action to either delete the user or...