Cross-site Scripting (XSS) - Generic in chatwoot/chatwoot

SUMMURY i contacted the company directly , but they told me submit the bug through huntr ✍️ Description Stored xss .Agent can make cross site scripting against admin VIDEO POC https://drive.google.com/file/d/1vWXiFKbsqVhMUS4kgpz50wSNsFTo9Ny/view?usp=sharing 🕵️‍♂️ Proof of Concept STEP TO REPRODUCE...