CVE-2023-33257

MediumCVSS 5.4

Published: 02/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

26th percentile - higher than 26% of all known CVEs

Verint Engagement Management version 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

An attacker could exploit this vulnerability to inject malicious HTML code, potentially leading to data theft or session hijacking.

It is recommended to update to the latest version of the software and implement input validation filters in the chat form.

Original NVD description (English source)

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.