PT-2021-9847
CVE-2020-15948
·
تاريخ النشر
2021-07-28
·
تاريخ التحديث
2021-08-03
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
eGain Chat version 15.5.5
Description
The issue allows for XSS via the
full name field, also known as the Name field.Recommendations
For version 15.5.5, ensure proper validation and sanitization of user input in the
full name field to prevent XSS attacks. As a temporary workaround, consider restricting user input in the Name field until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾