CNNVD-202508-3072 Information

CNNVD ID

CNNVD-202508-3072

CVE-2025-52184

  • CNNVD Published: 2025-08-26

Description (Chinese)

Helpy.io是美国Helpy公司的一个自托管客服平台。 Helpy.io 2.8.0版本存在安全漏洞,该漏洞源于New Topic Ticket功能存在跨站脚本,可能导致权限提升。

Description (English)

Helpy.io is a private guest service platform for Helpy in the United States. Helpy.io 2.8.0 has a security loophole, which stems from the existence of a cross-site script for the New Topic Ticket function, which may lead to increased access.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Helpy

Published

2025-08-26

Last Modified

2026-02-24

References

https://gist.github.com/gmrvh/eeb6aa8b379c7ad3860d78ee054f6123 https://gist.github.com/gmrvh/947e517f263245b13abcc63226907f4f https://nvd.nist.gov/vuln/detail/CVE-2025-52184

Share on: