CVE-2023-0325

Name of the Vulnerable Software and Affected Versions Uvdesk version 1.1.1

Description The issue allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.

Recommendations For Uvdesk version 1.1.1, update the application to a version that correctly validates the message sent by the clients in the ticket to prevent stored XSS exploitation. As a temporary workaround, consider restricting the input validation for the message sent by the clients in the ticket to minimize the risk of exploitation.