Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 11 MIN AGO
T-11M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-73531
django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
Medium
PUBLISHED
CNA: VulnCheck
Base score
5.3
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 19:06Z
23 HR AGO
Last updated
2026-08-14 16:52Z
1 HR AGO
Reserved
2026-08-12
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
Medium (CVSS 5.3)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Weaknesses
CWE-79
SSVC decision
No CISA-ADP assessment
Data version
5.2
Document digest
5ebf60cba87b1481f470e125a881c4e885f89f3b1b0db007600492b3ece4f939
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
django-helpdesk
django-helpdesk
0 to < 2.3.3
—
05
References
REFS: 2
github.com
GitHub Security Advisory (GHSA-q46c-8w98-fq2g)
https://github.com/django-helpdesk/django-helpdesk/security/advisories/GHSA-q46c-8w98-fq2g
vendor-advisory
www.vulncheck.com
https://www.vulncheck.com/advisories/django-helpdesk-stored-xss-via-html-attachments
third-party-advisory