EIP-2026-112939

This is a functional proof-of-concept for a stored XSS vulnerability in Uvdesk 1.1.4. The exploit demonstrates how an authenticated user can inject malicious JavaScript via a ticket reply, which executes when viewed by another user (e.g., an admin).