https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T04:41:32.172121+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06959 bdu:2025-06959 2026-10-15T04:41:32.224788+00:00 bdu:2025-06959 https://cve.radiocsirt.org/vuln/cnvd-2025-20799 cnvd-2025-20799 2026-10-15T04:41:32.224827+00:00 cnvd-2025-20799 https://cve.radiocsirt.org/vuln/euvd-2026-242265 EUVD-2026-242265 2026-10-15T04:41:32.224844+00:00 EUVD-2026-242265 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48483 fkie_cve-2025-48483 2026-10-15T04:41:32.224857+00:00

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data during mail signature sanitization. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive data, hijack user sessions, or conduct other malicious activities. Additionally, if an administrator accesses one of these emails with a modified signature, it could result in a subsequent Cross-Site Request Forgery (CSRF) vulnerability. This issue has been patched in version 1.8.180.