Vulnerabilities in freescout-help-desk

85 results
CVE-2025-48484MEDIUMFreeScout Vulnerable to Stored XSSEPSS 0.3%CVE-2025-48488MEDIUMFreeScout Vulnerable to Stored XSSEPSS 0.3%CVE-2025-48487MEDIUMFreeScout Vulnerable to Stored XSSEPSS 0.3%CVE-2025-48485MEDIUMFreeScout Vulnerable to Stored XSSEPSS 0.3%CVE-2026-85742HIGHFreeScout: Conditional stored admin XSS via failed-job detailsEPSS 0.3%CVE-2026-53591HIGHFreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmailsEPSS 0.3%CVE-2026-85743HIGHFreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinksEPSS 0.3%CVE-2026-41903MEDIUMFreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)EPSS 0.3%CVE-2025-48875MEDIUMFreeScout Vulnerable to Stored XSSEPSS 0.3%CVE-2026-62856HIGHFreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel QueryEPSS 0.3%CVE-2026-40570MEDIUMFreeScout's Missing Authorization in load_customer_info Allows Any Authenticated User to Access Full Customer PIIEPSS 0.2%CVE-2026-41902CRITICALFreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaksEPSS 0.2%CVE-2026-39384HIGHFreeScout Customer Merge Cross-Mailbox Authorization BypassEPSS 0.2%CVE-2026-40497HIGHFreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature (CSRF Token Exfiltration)EPSS 0.2%CVE-2026-40567MEDIUMFreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature VariablesEPSS 0.2%CVE-2026-45295MEDIUMFreeScout Vulnerable to Unauthenticated Thread Read-Status Manipulation and Conversation Enumeration via Open Tracking EndpointEPSS 0.2%CVE-2026-40568HIGHFreeScout Vulnerable to XSS via Mailbox Signature Due to Incomplete HTML SanitizationEPSS 0.2%CVE-2026-40592MEDIUMFreeScout's cross-user undo reply allows mailbox peers to recall another agent's outbound replyEPSS 0.2%CVE-2026-41192HIGHFreeScout's client-controlled attachment IDs allow deletion of existing conversation attachmentsEPSS 0.2%CVE-2026-40589HIGHFreeScout has Customer Edit Cross-Mailbox Email TakeoverEPSS 0.2%