CVE-2019-17176

Genesys PureEngage Digital eServices 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp ActionColor, ClientNickNameColor, Email, email, or emailaddress parameter...

CVE-2019-17176

CVE-2019-17176 affects Genesys PureEngage Digital (eServices) 8.1.x. A Cross-Site Scripting (XSS) flaw exists in the WEB UI via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp, triggered by parameters such as ActionColor, ClientNickNameColor, Email, email, or email_address. Impact: ability to execute c...