Cross-site scripting (XSS) vulnerability in call_entry.php in Call Center Software 0 93 allows remote attackers to inject arbitrary web script or HTML via the problem_desc parameter as demonstrated by the ONLOAD attribute of a BODY element.