CVE-2026-114398

The Trudesk application, through version 1.2.11 , is vulnerable to an unrestricted file upload (CWE-434) via the /settings/general/uploadlogo, uploadpagelogo, and uploadfavicon endpoints. This flaw allows any authenticated user to upload HTML or SVG files into the public webroot. By spoofing an i...