Insecure Logout

intercom-rails is vulnerable to insecure logouts. The library does not delete cookies on a user logging out, meaning that users aren't properly signed out, allowing a malicious user to access the system as a different user...

Cross-site Scripting (XSS)

intercom-rails is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the script tags in intercom settings...

Cross-Site Scripting (XSS)

intercom-rails is vulnerable to cross-site scripting XSS attacks. A malicious user can inject or execute arbitrary script by pre-appending script tags before the arbitrary script in their data...