Cross-site Scripting (XSS)

djangohelpdesk is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to improper sanitization when rendering to Markdown allowing attackers to bypass the filters and inject arbitrary code to victim's web browser...

Cross-Site Scripting (XSS)

djangohelpdesk is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser through a specifically crafted attachment via the processattachments function...