CVE-2026-40229 — Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered unes — CVE Database · The Intelligence Room