Количество 3
Количество 3
CVE-2025-66824
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.
GHSA-wc9p-rvp2-mc4r
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.
BDU:2026-04922
Уязвимость функции Create/Edit Conference программного обеспечения TrueConf Server, позволяющая нарушителю получить доступ к аутентификационным данным
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-66824 A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field. | CVSS3: 8.7 | 0% Низкий | 8 месяцев назад |
| GHSA-wc9p-rvp2-mc4r A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field. | CVSS3: 7.3 | 0% Низкий | 8 месяцев назад |
 | BDU:2026-04922 Уязвимость функции Create/Edit Conference программного обеспечения TrueConf Server, позволяющая нарушителю получить доступ к аутентификационным данным | CVSS3: 5.7 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу