Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the web-based management interface of Cisco Unified Contact Center Express (CCX). This vulnerability allows an authenticated, remote attacker to inject malicious scripts that are stored and executed on the affected system. The issue arises from improper input sanitization in the management interface. Exploitation requires valid administrative credentials.

Impact

Successful exploitation allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Cisco has released software updates to address this vulnerability. Users are advised to consult the Cisco Security Advisories page for upgrade instructions. For specific release information, refer to the Fixed Software section of the advisory.