CVE-2026-102372
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
GestSup GestSup
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 3.2.61GestSupCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies. Attackers can send emails to the monitored mailbox containing script tags and event handlers that execute in technician browsers, enabling ticket data theft and unauthorized actions.
Text from CVE List
Affected versions 1
- GestSupaffected: all versions before 3.2.61CVE List
References 5
- gestsup.fr/index.php?page=changelogFixvia CVE List
- gestsup.fr/index.php?page=download&channel=stable&version=3.2.61&type=patchFixvia CVE List
- vulncheck.com/advisories/gestsup-before-3.2.62-stored-xss-via-email-body-in-login-imap-connectorAdvisoryvia CVE List
- blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/Exploitvia CVE List
- gestsup.fr/index.php?page=downloadReferencevia CVE List