CVE-2020-15948 – eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.

eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15948

Reference (s):

• http://packetstormsecurity.com/files/163687/eGain-Chat-15.5.5-Cross-Site-Scripting.html