medium6.1
CVE-2019-16950
An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34.
Impact
An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enghouse | Web Chat | Versions 6.1.300.31, 6.2.284.34 |