CVE-2019-17176

Genesys PureEngage Digital eServices 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp ActionColor, ClientNickNameColor, Email, email, or emailaddress parameter...

CVE-2019-17176: Improper Neutralization of Input During Web Page Generation

Genesys PureEngage Digital eServices 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp ActionColor, ClientNickNameColor, Email, email, or emailaddress parameter...

PT-2019-14983

Name of the Vulnerable Software and Affected Versions Genesys PureEngage Digital eServices version 8.1.x Description The issue allows for XSS attacks through specific JSP files, namely HtmlChatPanel.jsp or HtmlChatFrameSet.jsp, by manipulating certain parameters. These parameters include...