CVE-2026-59239

Stored Cross-site Scripting CWE-79 in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated low-privileged user to execute arbitrary JavaScript in another user's browser, including administrators, leading to session compromise and account takeover, via a payload...

CVE-2026-32754

FreeScout (Laravel) versions ≤ 1.8.208 are affected by a Stored XSS in email notification templates. Incoming email bodies are stored and rendered unescaped with Blade's raw output {!! $thread->body !!}, enabling an attacker to inject HTML/JS via a sent email that can execute when recipients (...

Jenkins Plugin Email Extension 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...