The vulnerability of the “chat feed” component of the automation software for interacting with Cisco SocialMiner customers allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability of the “chat feed” component of the Cisco SocialMiner automation software exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded by...