Cross-Site Scripting Vulnerability in Cisco Unified Contact Center Express

Cisco Unified Contact Center Express is the customer relationship management component of a unified communications solution from the U.S. company Cisco (Cisco). A cross-site scripting vulnerability exists in Cisco Unified Contact Center Express, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is viewed.