CVE-2016-15035

Doc2k RE-Chat 1.0 contains a cross-site scripting vulnerability in an unknown portion of the JavaScript file js_on_radio-emergency.de_/re_chat.js. Exploitation can be performed remotely, implying potential user interaction is not required for initial access, with impact limited to confidentiality...