CVE-2019-16950

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript...

EUVD-2019-7430

Malware in sbrugna...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the queuename of the live-poll feature when Internet Explorer is used. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise...

CVE-2019-16950

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript...

PT-2019-14882

Name of the Vulnerable Software and Affected Versions Enghouse Web Chat versions 6.1.300.31 through 6.2.284.34 Description A cross-site scripting XSS issue was found, allowing the insertion of user-supplied JavaScript through the QueueName parameter of a GET request. Recommendations For versions...

CVE-2019-16950: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript...