Vulnerability vector:
- Base vulnerability score (CVSSv4.0): CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
- Severity (CVSSv4.0): 6.1 (Medium)
Description:
The vulnerability was identified in FreeScout, version 1.8.182.
The discovered vulnerability allows an attacker to inject arbitrary HTML tags and JavaScript into web pages, resulting in execution of malicious code in the victim’s browser.
Vulnerability status: Confirmed by vendor
Date of vulnerability remediation: 08.08.2025
Recommendations:
- Update to version End-User Portal Module v1.0.95, Teams Module v1.0.23 or higher
Additional information: Security advisory, Press release
Researcher: Daniil Satyaev, Roman Cheremnykh, Artem Danilov (Positive Technologies)