{"action":"Upgrade django-helpdesk to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"django-helpdesk","cve_ids":["CVE-2021-3994"],"ecosystem":"PyPI","epss":0.01399,"exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-2v5j-q74q-r53f","id":"tcs_01M5KET9T560QPG4AJ6NRDPJX4","modified_at":"2024-09-16T22:02:48.626351Z","published_at":"2021-12-03T20:42:26Z","references":["https://osv.dev/vulnerability/GHSA-2v5j-q74q-r53f","https://nvd.nist.gov/vuln/detail/CVE-2021-3994","https://github.com/django-helpdesk/django-helpdesk/commit/a22eb0673fe0b7784f99c6b5fd343b64a6700f06","https://github.com/advisories/GHSA-2v5j-q74q-r53f","https://github.com/django-helpdesk/django-helpdesk","https://github.com/django-helpdesk/django-helpdesk/releases/tag/0.3.2","https://github.com/pypa/advisory-database/tree/main/vulns/django-helpdesk/PYSEC-2021-438.yaml","https://huntr.dev/bounties/be7f211d-4bfd-44fd-91e8-682329906fbd"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-2v5j-q74q-r53f","url":"https://osv.dev/vulnerability/GHSA-2v5j-q74q-r53f"}],"summary":"django-helpdesk is vulnerable to Cross-site Scripting"}