CVE-2024-4302 — Super 8 livechat SDK - Cross-site Scripting
Super 8 Live Chat online customer service platform fails to properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Wh…
Published: 2024-04-29 · CVSS: 6.1 · CVSS 3.1
Super 8 Live Chat online customer service platform fails to properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. When the message recipient views the message, they become susceptible to Cross-site Scripting (XSS) attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7