NICE Chat HTML Injection Vulnerability

A vulnerability allowing HTML injection has been identified in NICE Chat, a customer service and contact center solution. This issue arises from the ability to manipulate the 'firstName' and 'lastName' parameters during a chat session, injecting arbitrary HTML that is later rendered in email transcripts. The injected HTML can be exploited to conduct phishing attacks, impersonate individuals, or steal credentials.

Impact

Exploitation of this vulnerability could lead to HTML injection in email transcripts, potentially allowing for phishing attacks, impersonation, or credential theft.