Helpy.io Helpy
6 CVEs affecting Helpy.io Helpy. Latest disclosed: 2026-04-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20851 | High | 8.8 | 2019-07-10 | Helpy before 2.2.0 allows agents to edit admins. |
CVE-2025-52184 | Medium | 6.1 | 2025-08-26 | Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion. |
CVE-2023-0357 | Medium | 6.1 | 2023-04-04 | Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not co… |
CVE-2018-18886 | Medium | 6.1 | 2019-06-18 | Helpy v2.1.0 has Stored XSS via the Ticket title. |
CVE-2026-40230 | Medium | 5.4 | 2026-04-29 | Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor priv… |
CVE-2026-40229 | Medium | 5.4 | 2026-04-29 | Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account na… |