Skip to content
OpenAdvisories

Package · Packagist

uvdesk/community-skeleton

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.1
    CVE-2023-0325

    Uvdesk vulnerable to stored cross-site scripting (XSS)

    Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.

    uvdesk/community-skeleton Packagist
  • High 8.8
    CVE-2023-0265

    Uvdesk remote code execution vulnerability

    Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.

    uvdesk/community-skeleton Packagist
  • Medium 4.3
    CVE-2023-1197

    Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton

    Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.

    uvdesk uvdesk/community-skeleton uvdesk/community-skeleton Packagist