VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 22, 2025· Updated Oct 23, 2025

Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot

CVE-2025-11952

Description

Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user, through /Records/SendSummaryMail.

Affected products

1
  • Oct8ne/Chatbotv5
    Range: 2.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.