CVE-2023-0325 (published 2023-04-04T00:00:00)
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.
Affected products: Vendor: n/a
Product: Uvdesk
Versions: 1.1.1