CVE-2022-48020

2023-05-1200:00:00

mitre

www.cve.org

vinteo

vcc

xss

vulnerability

conference parameter

arbitrary code

browser

0.001 Low

EPSS

Percentile

43.0%

JSON

Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim user’s browser.

References

seq.team/en/

seq.team/en/blog/reflected-cross-site-scripting-xss-in-vinteo-vcc/

www.linkedin.com/in/dmitry-kiryukhin-b5741421b/

0.001 Low

EPSS

Percentile

43.0%

JSON

Related for CVELIST:CVE-2022-48020