CVE-2021-26812

CVE-2021-26812

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

40Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 97%
Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.
Affected products
n/a · n/a