Browse all 4 CVE security advisories affecting django-helpdesk. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Django-helpdesk serves as a ticketing system for managing customer support requests within Django applications. Historically, it has been susceptible to multiple security vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, with three CVEs documented. The application's reliance on Django's framework introduces potential risks from both core framework issues and third-party dependencies. Notable security characteristics include its handling of user permissions and file uploads, which have been vectors for past exploits. While no major public incidents have been widely reported, the presence of CVEs indicates ongoing security considerations for implementations handling sensitive customer data or internal communications.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-73531 | django-helpdesk < 2.3.3 Stored XSS via HTML Attachments — django-helpdesk CWE-79 | 6.1 | Medium | 2026-08-13 |
| CVE-2021-3994 | Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk — django-helpdesk/django-helpdesk CWE-79 | 6.1 | - | 2021-12-01 |
| CVE-2021-3950 | Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk — django-helpdesk/django-helpdesk CWE-79 | 6.1 | - | 2021-11-19 |
| CVE-2021-3945 | Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk — django-helpdesk/django-helpdesk CWE-79 | 6.1 | - | 2021-11-13 |
This page lists every published CVE security advisory associated with django-helpdesk. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.