Threats tagged 'ghsa-rx97-pwc5-6v32'

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) allows an authenticated user with Agent role or higher to upload files containing malicious scripts or HTML. This can lead to browser-based attacks when other users access the uploaded content. The flaw stems from inadequate validation of file contents during upload operations.