Django-helpdesk Project Django-helpdesk — known CVE vulnerabilities

Every CVE whose affected-product data names Django-helpdesk Project Django-helpdesk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-3994 — CVSS 9.6 (critical): django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3945 — CVSS 6.1 (medium): django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3950 — CVSS 5.4 (medium): django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2018-25111 — CVSS 5.1 (medium): django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.