Oct8ne Chatbot Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Oct8ne Chatbot version 2.3. This issue allows attackers to execute JavaScript in the context of the user's browser by injecting malicious payloads through transcripts that are emailed to users. Exploitation of this vulnerability could lead to the theft of sensitive user information, such as session cookies, or allow attackers to perform actions on behalf of the user.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

The vulnerability has been fixed in the latest version of Oct8ne Chatbot.