CVE-2026-40230MEDIUM 5.4Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin o…
CVE-2026-40229MEDIUM 5.4Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML …
CVE-2025-52184MEDIUM 6.1Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion.
CVE-2023-0357MEDIUM 6.1Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the appl…
CVE-2018-20851HIGH 8.8Helpy before 2.2.0 allows agents to edit admins.