django-helpdesk is vulnerable to Cross-site Scripting

CRITICAL 9.6CVE-2021-3994 · GHSA-2v5j-q74q-r53f · PYSEC-2021-438 · Published 01/12/2021 · updated 17/06/2026

In short

CVE-2021-3994 is a CRITICAL (CVSS 9.6) vulnerability affecting django-helpdesk, django-helpdesk (django-helpdesk project).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.6% of all vulnerabilities.
Fix: update to 0.3.2 or later.

Package	Affected versions	Patched versions
django-helpdesk PyPI	`< 0.3.2`	`0.3.2`
django-helpdesk django-helpdesk_project	`< 0.3.2`	`0.3.2`

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

NVD description

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.3.2

0.3.2

< 0.3.2

0.3.2

More vulnerabilities in django-helpdesk

See all →