CVE record · 1 source
CVE-2026-114398
CVSS 5.4Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public…
- CVSS
- 5.4
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public…
Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints.…