Gestsup vulnerabilities

Products

• Gestsup 12

Newest

• gestsup GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector CVE-2026-102374 5.3 MediumSeptember 29, 2026
• gestsup GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter CVE-2026-102373 7.1 HighSeptember 29, 2026
• gestsup GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector CVE-2026-102372 5.3 MediumSeptember 29, 2026
• gestsup GestSup before 3.2.62 Remote Code Execution via IMAP Attachment CVE-2026-100389 9.2 CriticalSeptember 25, 2026
• gestsup GestSup < 3.2.60 SQL Injection in Ticket Creation CVE-2026-22196 7.7 HighJanuary 9, 2026
• gestsup GestSup < 3.2.60 Stored XSS in API Error Logs CVE-2026-22198 5.1 MediumJanuary 9, 2026
• gestsup GestSup < 3.2.60 Multiple SQL Injections in Asset List CVE-2026-22197 7.5 HighJanuary 9, 2026
• gestsup GestSup < 3.2.60 SQL Injection in Search Bar CVE-2026-22195 7.7 HighJanuary 9, 2026
• gestsup GestSup <= 3.2.60 CSRF Allows Privileged Actions CVE-2026-22194 8.9 HighJanuary 9, 2026
• gestsup A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user... CVE-2023-52060 4.3 MediumFebruary 13, 2024
• gestsup A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute... CVE-2023-52059 5.4 MediumFebruary 13, 2024
• gestsup Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote... CVE-2021-31646 9.8 CriticalApril 26, 2021