eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/163687/eGain-Chat-15.5.5-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2021-07-30 07:15
Updated : 2021-08-03 16:46
NVD link : CVE-2020-15948
Mitre link : CVE-2020-15948
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
egain
- chat