CVE-2025-48486

FreeScout (PHP/Laravel) has an XSS flaw prior to version 1.8.180 due to insufficient input validation/sanitization in Session::flash and __, allowing user input to execute in the browser. The vulnerability is patched in 1.8.180. No exploit details or attack vectors are provided beyond this; remed...

CVE-2025-48485 FreeScout Vulnerable to Stored XSS

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data when an authenticated user updates the profile of an arbitrary customer...