---
id: CVE-2025-71419
title: >-
  UVdesk core-framework before 1.1.7 contains a stored cross-site scripting
  vulnerability in the SwiftMailer configuration identifier parameter of the
  createMailerConfiguration action
summary: >-
  UVdesk core-framework before 1.1.7 contains a stored cross-site scripting
  vulnerability in the SwiftMailer configuration identifier parameter of the
  createMailerConfiguration action. Attackers with ROLE_AGENT can inject
  malicious script …
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'
cwe:
  - CWE-79
vendor: uvdesk
product: core-framework
affected:
  - core-framework < 1.1.7
  - community-skeleton < 1.1.8
published: '2026-09-21'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T14:17:14.303'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71419'
references:
  - url: 'https://github.com/uvdesk/community-skeleton/releases/tag/v1.1.8'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/uvdesk/core-framework'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/uvdesk/core-framework/blob/v1.1.6/Controller/SwiftMailer.php#L38-L46
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/uvdesk/core-framework/blob/v1.1.6/Resources/views/SwiftMailer/manageConfigurations.html.twig#L324
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/uvdesk/core-framework/commit/e5e92d1f5bdb24d1b96751213fb427035736371f
    label: disclosure@vulncheck.com
  - url: 'https://github.com/uvdesk/core-framework/releases/tag/v1.1.7'
    label: disclosure@vulncheck.com
  - url: 'https://hackmd.io/@leediay/B1Cz5voFGg'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/uvdesk-core-framework-before-1.1.7-stored-xss-via-swiftmailer
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-21T14:38:56.362Z'
---

## Overview

UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLE_AGENT can inject malicious script into the identifier field, which is persisted and executed when other members access the configuration update page.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.