What’s Vulnerable › Vulnerabilities

CVE-2021-3945: Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-11-13 · updated 2026-06-17
• Weakness: CWE-79

Description

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

• django-helpdesk/django-helpdesk: through 0.3.0

References

• https://github.com/django-helpdesk/django-helpdesk/commit/2c7065e0c4296e0c692fb4a7ee19c7357583af30
• https://huntr.dev/bounties/745f483c-70ed-441f-ab2e-7ac1305439a4
• https://github.com/django-helpdesk/django-helpdesk/commit/2c7065e0c4296e0c692fb4a7ee19c7357583af30
• https://huntr.dev/bounties/745f483c-70ed-441f-ab2e-7ac1305439a4

Get alerted when CVE-2021-3945 or the next vulnerability affects your stack