Vulnerabilities in HeliumEdu

2 results
CVE-2026-55875MEDIUMHelium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal NetworkEPSS 0.2%CVE-2026-55876LOWHelium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable ScriptsEPSS 0.2%