Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•9 views

CVE-2026-40230: Improper Neutralization of Input During Web Page Generation

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or JavaScript in the body field of a knowledge base Doc.This issue affects helpy: 2.8.0...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits1References3
Rows per page
Query Builder