1169 matches found
PYSEC-2021-431
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
The CVE-2021-3950 entry describes a stored Cross-site Scripting (XSS) vulnerability in django-helpdesk caused by improper neutralization of input during Web Page Generation. Affected component/file is django-helpdesk, and exploitation could allow arbitrary JavaScript execution in a victim’s brows...
CVE-2021-3950 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
Description Stored XSS via Markdown at Description or Comment of Ticket Detail When rendering to Markdown, the application does not filter and check the properties are valid, so when the user enters XSS it will render as XSS . Proof of Concept // PoC.req POST /tickets/submit/ HTTP/1.1 Host:...
Django-helpdesk跨站脚本漏洞
Django-Helpdesk is a Django application. It is used to manage internal helpdesk tickets. A cross-site scripting vulnerability exists in Django-helpdesk that stems from the product's web generation page not validating input data. An attacker can use this vulnerability to cause client-side code...
Django-Helpdesk Cross-Site Scripting Vulnerability
Django-Helpdesk is a Django application. A cross-site scripting vulnerability exists in Django-Helpdesk, which stems from a lack of effective filtering and escaping of user input during Web page generation in django-helpdesk. An attacker could exploit this vulnerability to insert malicious code...
GHSA-VX6V-XG64-PMR8 Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross-Site Scripting (XSS)
django-helpdesk is vulnerable to cross-site scripting. The library does not properly sanitize input strings, allowing an attacker to inject and execute malicious javascript...
CVE-2021-3945
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3945
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3945
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-430
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-430
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3945 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3945
Summary: CVE-2021-3945 affects the Django-Helpdesk application, where a Cross-site Scripting vulnerability arises from improper neutralization of input during Web page generation. The issue stems from insufficient filtering/escaping of user input in django-helpdesk, enabling injection of maliciou...
django-helpdesk 跨站脚本漏洞
Django-Helpdesk is a Django application. A cross-site scripting vulnerability exists in Django-Helpdesk, which stems from a lack of effective filtering and escaping of user input during Web page generation in django-helpdesk. An attacker could exploit this vulnerability to insert malicious code...
Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
Description Stored XSS via upload 'Attachments' with format .svg or .html Detail When opening the attachment, some format files will be rendered and loaded on the browser. So it allows executing arbitrary javascript code that was injected into attachment before. Proof of Concept // PoC.svg...