Threats tagged 'ghsa-fc9v-h837-498v'

Oct8ne Chatbot version 2.3 contains a stored Cross-site Scripting (XSS) vulnerability. An attacker can inject malicious JavaScript code into a transcript that is sent via email, which executes in the victim's browser when the email is viewed. This can lead to theft of sensitive data like session cookies or unauthorized actions performed on behalf of the user through the /Records/SendSummaryMail endpoint.