CERT24GHSA-55h7-pmh2-9w68: Remotely exploitable XSS vulnerability in Privoce VocechatLoading data…
CERT24Threat Observatory
Period

GHSA-55h7-pmh2-9w68: Remotely exploitable XSS vulnerability in Privoce Vocechat

A vulnerability affects Privoce Vocechat versions up to 0.9.121. Manipulation of the welcome argument in the Query Parameter Handler component, involving processing of widget.html, leads to cross-site scripting (XSS). The attack can be launched remotely, and the exploit has been publicly disclosed.

← Back to intelligence

GHSA-55h7-pmh2-9w68: Remotely exploitable XSS vulnerability in Privoce Vocechat

A vulnerability affects Privoce Vocechat versions up to 0.9.121. Manipulation of the welcome argument in the Query Parameter Handler component, involving processing of widget.html, leads to cross-site scripting (XSS). The attack can be launched remotely, and the exploit has been publicly disclosed.