Webzwo0I

**Name of the Vulnerable Software and Affected Versions** Etherpad version 1.8.13 **Description** A Cross-Site Scripting (XSS) issue in the chat component of Etherpad allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad. This occurs due to a lack of protection for the web page structure, enabling a remote attacker to execute arbitrary JavaScript or HTML code. **Recommendations** For Etherpad version 1.8.13, consider disabling the chat component until a patch is available to prevent the injection of arbitrary JavaScript or HTML code. Restrict access to the chat functionality to minimize the risk of exploitation. Avoid importing crafted pads to the chat component until the issue is resolved.