CVE-2019-1702

Cisco Enterprise Chat and Email suffers cross-site scripting (XSS) in its web-based management interface due to insufficient input validation. An unauthenticated attacker could lure a user to click a crafted link or open a chat window containing malicious code, potentially executing script in the...