Description
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Uvdesk | 1.1.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | uvdesk/community-skeleton | <= 1.1.1 | — | GHSA-fwhv-9phj-wrj5 |