CVE-2026-53595

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint "POST /user-setup/hash/invitesentat" "OpenController@userSetupSave" selects the target account solely by its "invitehash" column, then overwrites that account's email a...