Vulnerability Details CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 3.5
References
- https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60
- https://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e
- https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b5196737516398b5ce0383875a5c60
- https://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e
Products affected by CVE-2021-3950
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:-
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.1.15
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.1.16
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.1.17
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.1.18
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.0
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.1
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.10
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.11
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.12
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.13
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.14
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.15
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.16
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.17
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.18
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.19
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.20
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.21
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.22
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.23
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.3
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.4
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.5
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.6
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.7
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.8
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.2.9
-
cpe:2.3:a:django-helpdesk_project:django-helpdesk:0.3.0