CVE-2021-26812
40Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 97%
probabilidade de exploração
97%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.
Produtos afetados
n/a · n/a