CVE-2025-48488
FreeScout Vulnerable to Stored XSS
概要
FreeScout Vulnerable to Stored XSS
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an HTML file containing malicious JavaScript code to the server, which can result in a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.180.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov