CVE-2026-116047 Privoce Vocechat Query Parameter widget.html cross site scripting

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2026-116047 Privoce Vocechat Query Parameter widget.html cross site scripting

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2026-116047

A cross-site scripting (XSS) vulnerability exists in Privoce Vocechat versions up to 0.9.121 . The flaw resides in the Query Parameter Handler component, specifically involving the processing of the widget.html file. By manipulating the welcome argument, a remote attacker can execute malicious sc...

Privoce VoceChat cross-site scripting vulnerability

Privoce VoceChat versions 0.9.121 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the “welcome” parameter by the Query Parameter Handler component in the widget.html file, potentially enabling cross-site scripting attacks...