CVE-2026-116047

A cross-site scripting (XSS) vulnerability exists in Privoce Vocechat versions up to 0.9.121 . The flaw resides in the Query Parameter Handler component, specifically involving the processing of the widget.html file. By manipulating the welcome argument, a remote attacker can execute malicious sc...