Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-40568

1 brief RSS
high advisory

FreeScout Stored XSS Vulnerability in Mailbox Signatures (CVE-2026-40568)

A stored cross-site scripting (XSS) vulnerability exists in FreeScout versions prior to 1.8.213 within the mailbox signature feature due to an incomplete HTML tag blocklist and failure to remove event handler attributes.

FreeScout xss cve-2026-40568 web-application
2r 1c