1202 matches found
PYSEC-2021-438
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994
CVE-2021-3994 affects django-helpdesk and is a Cross-site Scripting vulnerability caused by improper neutralization of input during web page generation. The CVSS3 details show a network-accessible, high-severity issue (base score 9.6) with low attack complexity, no privileges required, but user i...
django-helpdesk跨站脚本漏洞
Django-Helpdesk is a Django application. It is used to manage internal helpdesk tickets. Django-Helpdesk suffers from a cross-site scripting vulnerability that can be exploited by an attacker to perform cross-site scripting attacks...
Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-VFRC-GGMC-5JWV Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-431
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-431
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
The CVE-2021-3950 entry describes a stored Cross-site Scripting (XSS) vulnerability in django-helpdesk caused by improper neutralization of input during Web Page Generation. Affected component/file is django-helpdesk, and exploitation could allow arbitrary JavaScript execution in a victim’s brows...
Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
Description Stored XSS via Markdown at Description or Comment of Ticket Detail When rendering to Markdown, the application does not filter and check the properties are valid, so when the user enters XSS it will render as XSS . Proof of Concept // PoC.req POST /tickets/submit/ HTTP/1.1 Host:...
Django-helpdesk跨站脚本漏洞
Django-Helpdesk is a Django application. It is used to manage internal helpdesk tickets. A cross-site scripting vulnerability exists in Django-helpdesk that stems from the product's web generation page not validating input data. An attacker can use this vulnerability to cause client-side code...
Django-Helpdesk Cross-Site Scripting Vulnerability
Django-Helpdesk is a Django application. A cross-site scripting vulnerability exists in Django-Helpdesk, which stems from a lack of effective filtering and escaping of user input during Web page generation in django-helpdesk. An attacker could exploit this vulnerability to insert malicious code...