CVE-2020-13972

Enghouse Web Chat 6.2.284.34 allows XSS

published September 3, 2020

CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.1th percentile
Published
2020-09-03T14:36Z
EPSS history
Timeline
  • 03 SEP 14:36Z
    Enghouse Web Chat 6.2.284.34 allows XSS
    cvelistv5