Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-86hp-crvx-3qvr

Опубликовано: 30 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).

EPSS

Процентиль: 9%
0.00033
Низкий

3.5 Low

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 1 месяца назад

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).

EPSS

Процентиль: 9%
0.00033
Низкий

3.5 Low

CVSS3

Дефекты

CWE-79