eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.

By admin