https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:13:24.884668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40565 CVE-2026-40565 — FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href 2026-10-08T01:13:24.900919+00:00

Affected: freescout-help-desk freescout

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function in app/Misc/Helper.php converts plain-text URLs in email bodies into HTML anchor tags without escaping double-quote characters (") in the URL. HTMLPurifier (called first via getCleanBody()) preserves literal " characters in text nodes. linkify() then wraps URLs including those " chars inside an unescaped href="..." attribute, breaking out of the href and injecting arbitrary HTML attributes. Version 1.8.213 fixes the issue.