Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Helpy 跨站脚本漏洞
Vulnerability Description
Helpy是一款开源的客户支持应用程序。该程序包括知识库、社区讨论和电子邮件等功能。 Helpy 2.8.0版本存在安全漏洞，该漏洞源于应用程序没有正确验证客户在工单中发送的附件。攻击者利用该漏洞执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A