The vulnerability of the arParams[API_KEY] parameter of the map.google component of the Bitrix24 service allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the arParamsAPIKEY parameter in the map.google component of the Bitrix24 business management service exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...