3 matches found
CVE-2018-18886
Helpy v2.1.0 has Stored XSS via the Ticket title.
CVE-2023-0357
Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket.
CVE-2018-20851
Helpy before 2.2.0 allows agents to edit admins.