A vulnerability was found in freescout-help-desk freescout up to 1.8.216. It has been rated as problematic. This affects an unknown part of the component Reply Message Handler. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-41904. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.