Vulnerability vector:
- Base vulnerability score (CVSSv4.0): CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
- Severity (CVSSv4.0): 6.1 (Medium)
Description:
The vulnerability was identified in FreeScout, version 1.8.182.
The discovered vulnerability allows an attacker to inject arbitrary HTML tags and JavaScript, leading to script execution in victims’ browsers and enabling social‑engineering attacks.
Vulnerability status: Confirmed by vendor
Date of vulnerability remediation: 31.10.2025
Recommendations:
- Update to versionv1.8.194 or higher
Additional information: Press release
Researcher: Daniil Satyaev, Roman Cheremnykh, Artem Danilov (Positive Technologies)