3 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-84642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames,...
CVE-2026-73531
django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. Attackers can...
PT-2026-71798
Name of the Vulnerable Software and Affected Versions django-helpdesk versions prior to 2.3.3 Description A stored cross-site scripting issue allows unauthenticated attackers to inject arbitrary JavaScript. This is achieved by submitting HTML-formatted email messages or uploading .html or .htm fi...