CVE-2021-26812
40Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 97%
exploitation probability
97%top 1% of all CVEs
observed exploitation
nono source reports it
Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.
Affected products
n/a · n/a