Lucene search
Veracode Vulnerability DatabaseVERACODE:40306HistoryApr 27, 2023 - 6:57 a.m.
Cross Site Scripting (XSS)
2023-04-2706:57:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
uvdesk
vulnerability
cross site scripting
xss
client messages
browser
software
EPSS
0.003
Percentile
70.6%
uvdesk/community-skeleton is vulnerable to Cross Site Scripting (XSS). The vulnerability exists because the library does not properly validate the messages sent by the clients in the ticket, which allows an attacker to inject and execute arbitrary JavaScript into the browser.
Related
github
github
Uvdesk vulnerable to stored cross-site scripting (XSS)
2023-04-05 00:30:39
osv
osv
Uvdesk vulnerable to stored cross-site scripting (XSS)
2023-04-05 00:30:39
CVE-2023-0325
2023-04-04 22:15:07
prion
prion
Cross site scripting
2023-04-04 22:15:00
cvelist
cvelist
CVE-2023-0325
2023-04-04 00:00:00
nvd
nvd
CVE-2023-0325
2023-04-04 22:15:07
cve
cve
CVE-2023-0325
2023-04-04 22:15:07