Vulnerabilities

TI-2026-29035 CVE-2026-40230 · GHSA-cgp7-5x28-x8x9

Helpy 2.8.0 - Stored XSS in knowledgebase Doc body rendering

LOW 21

Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00178 Published 2026-04-29 No fix listed CWE-79

TI-2026-29034 CVE-2026-40229 · GHSA-qxjc-9q88-9cgh

LOW 22

Helpy contains a stored cross-site scripting vulnerability in the post author display logic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00177 Published 2026-04-29 No fix listed CWE-79

TI-2025-32500 CVE-2025-52184 · GHSA-5j55-9rxj-8v8x

MEDIUM 60

Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00345 Published 2025-08-26 No fix listed CWE-79

TI-2023-00341 CVE-2023-0357 · GHSA-g23c-4prh-q9fg

MEDIUM 60

Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00687 Published 2023-04-04 No fix listed CWE-79

TI-2018-14813 CVE-2018-20851 · GHSA-j9j2-w7v6-qw4x

MEDIUM 41

Helpy before 2.2.0 allows agents to edit admins.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01505 Published 2019-07-10 No fix listed

TI-2018-13383 CVE-2018-18886 · GHSA-wf65-c7j4-mw32

LOW 29

Helpy v2.1.0 has Stored XSS via the Ticket title.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00878 Published 2019-06-18 No fix listed CWE-79