Description
Django-Helpdesk是一个 Django 应用程序。。用于管理内部服务台票证。 Django-helpdesk 中存在跨站脚本漏洞，该漏洞源于产品的web生成页面未对输入数据做有效验证。攻击者可通过该漏洞导致客户端代码执行。
Django-helpdesk跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-3994
https://github.com/advisories/GHSA-2v5j-q74q-r53f
https://security.snyk.io/vuln/SNYK-PYTHON-DJANGOHELPDESK-1922967
https://www.h3c.com/cn/d_202112/1519649_30003_0.htm
https://cve.imfht.com/detail/CVE-2021-3994
https://access.redhat.com/security/cve/cve-2021-3994
https://vulert.com/vuln-db/pypi-django-helpdesk-16507
http://zone.ci/vulns/ys/351974.html