CVE-2026-62854 | freescout-help-desk FreeScout up to 1.8.224 Mailbox Signature /uploads/upload stripDangerousTags cross site scripting

A vulnerability classified as problematic was found in freescout-help-desk FreeScout up to 1.8.224. Affected by this issue is the function Helper::stripDangerousTags of the file /uploads/upload of the component Mailbox Signature. Such manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-62854. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More