Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter).Referenceshttps://gist.github.com/MortalP0ison/5fd584b4c85fa13281fdc918913446fa