CVE-2026-53592

CVE-2026-53592 affects FreeScout (Laravel-based). A prototype pollution flaw in the frontend JavaScript function getQueryParam (/public/js/main.js) allows attacker-controlled URL query strings to write into Object.prototype. Initial fix in 1.8.139 blocked top-level proto keys but did not sanitize...