eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.Referenceshttp://packetstormsecurity.com/files/163687/eGain-Chat-15.5.5-Cross-Site-Scripting.html