CVE-2026-40568 | freescout-help-desk freescout up to 1.8.212 Conversation app/Misc/Helper.php stripDangerousTags cross site scripting (GHSA-w2f5-6wcv-677r)

April 21, 2026 Yanac

A vulnerability was found in freescout-help-desk freescout up to 1.8.212 and classified as problematic. This issue affects the function Helper::stripDangerousTags of the file app/Misc/Helper.php of the component Conversation Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-40568. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More