Medium severity6.1NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2019-16950

Description

An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript.

Affected products

Enghouse/Web Chatdescription
Enghouse/Web Chatllm-fuzzy
Range: 6.1.300.31, 6.2.284.34

Patches

Vulnerability mechanics

References

mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000