Cross-Site Scripting (XSS)

djangohelpdesk is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser through a specifically crafted attachment via the processattachments function...