CVE-2025-71419 [MEDIUM] – UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in

UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLE_AGENT can inject malicious script into the identifier field, which is persisted and executed when other members access the configuration update page.