VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 30, 2025· Updated Jun 17, 2026

CVE-2025-48488

CVE-2025-48488

Description

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an HTML file containing malicious JavaScript code to the server, which can result in a Cross-Site Scripting (XSS) vulnerability. This issue has been patched in version 1.8.180.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Freescout/Freescout3 versions
    cpe:2.3:a:freescout:freescout:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:freescout:freescout:*:*:*:*:*:*:*:*range: <1.8.180
    • (no CPE)range: <1.8.180
    • (no CPE)range: < 1.8.180

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.