6.1 Medium

CVE-2023-0357 Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application

Description

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket.

Affected products and versions

Product	Affected versions	Fixed in
Helpy	2.8.0	No fix stated

Do you use Helpy?

Track this CVE Watch Helpy Check my SBOMs

www.cveye.io/en/cve/CVE-2023-0357

Timeline

Published April 4, 2023
Last modified February 13, 2025

References

fluidattacks.com fluidattacks.com
github.com github.com

Track this CVE