libredesk vulnerabilities

CVEs whose affected-version data names the libredesk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-68927Medium· 6.1

9mo ago

Libredesk is a self-hosted customer support desk

Libredesk is a self-hosted customer support desk. Prior to version 0.8.6-beta, LibreDesk is vulnerable to stored HTML injection in the contact notes feature. When adding notes via POST /api/v1/contacts/{id}/notes, the backend automatical…

▾ Sunlitlibredesk · libredeskEPSS 0.23%via NVD