Report: CVE-2026-40497 - FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature

Report: CVE-2026-40497 - FreeScout Vulnerable to CSS Injection via Stored Style Tag in Mailbox Signature

CVE ID :CVE-2026-40497 Published : April 21, 2026, 3:16 a.m. | 1 hour, 2 minutes ago Description :FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `

CVE Details

Published
April 21, 2026