Medium severity5.4NVD Advisory· Published Oct 23, 2023· Updated Jun 17, 2026
CVE-2023-37636
CVE-2023-37636
Description
A stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field when creating a ticket.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.1.1
Patches
Vulnerability mechanics
References
1- www.esecforte.com/cve-2023-37636-stored-cross-site-scripting/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.