CVE-2022-37775 – Genesys PureConnect Cross Site Scripting

https://notcve.org/view.php?id=CVE-2022-37775

16 Sep 2022 — Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter. El servicio de chat de Genesys PureConnect Interaction Web Tools (hasta al menos el 26 de septiembre de 2019) permite un ataque de tipo XSS dentro del historial de chat imprimible por medio del parámetro POST JSON del participante -) name Genesys PureConnect as of their build on 08-October-2020 suffers from a cross site scri... • https://packetstorm.news/files/id/168410 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •