FreeScout Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in FreeScout versions prior to 1.8.180. The issue arises from improper validation and sanitization of user input, allowing an authorized user to upload an HTML file with malicious JavaScript to the server. This vulnerability requires the application to be hosted on Apache and can be exploited by deleting the .htaccess file to bypass restrictions.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, an authorized user must first delete the .htaccess file, which removes restrictions on file uploads. Then, upload an HTML file containing malicious JavaScript through the application's upload feature. The injected script will be executed when the uploaded file is accessed, demonstrating the cross-site scripting vulnerability.

Remediation

Users are advised to update FreeScout to version 1.8.180 or later, where this vulnerability has been patched.