CVE-2024-2031

CVE-2024-2031 affects the Video Conferencing with Zoom plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the shortcode used by the plugin, specifically the zoom_recordings_by_meeting shortcode, and impacts all versions up to and including 4.4.4. Root cause per the ...

CVE-2024-2031 Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoomrecordingsbymeeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

WordPress Plugin Video Conferencing with Zoom Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Video Conferencing with Zoom Plugin <= 4.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.4.4 Fixed in 4.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2031 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9603227b9596 Credits Krzysztof...

Fake Skype, Zoom, Google Meet Sites Infecting Devices with Multiple RATs

By Deeba Ahmed Remote Access Trojan Threat: Beware Malicious Downloads Disguised as Meeting Apps. This is a post from HackRead.com Read the original post: Fake Skype, Zoom, Google Meet Sites Infecting Devices with Multiple RATs...

Here Are the Google and Microsoft Security Updates You Need Right Now

Plus: Mozilla patches 12 flaws in Firefox, Zoom fixes seven vulnerabilities, and more critical updates from February...

Zoom VDI Meeting Client < 5.16.5 Vulnerability (ZSB-23062)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23062 advisory. - Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial o...

Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24002)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24002 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24004)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24004 advisory. - Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of...

Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24005)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24005 advisory. - Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via loca...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-24006)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24006 advisory. - Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23059)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23059 advisory. - Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an...

Zoom Client for Meetings < 5.16.10 Vulnerability (ZSB-24001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24001 advisory. - Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows...

Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24004)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24004 advisory. - Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-23059)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23059 advisory. - Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-24008)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24008 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom VDI Meeting Client < 5.16.10 Vulnerability (ZSB-24008)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24008 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Zoom Client for Meetings < 5.16.5 Vulnerability (ZSB-23062)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23062 advisory. - Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial ...

Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24005)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24005 advisory. - Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via loc...

Zoom VDI Meeting Client < 5.17.5 Vulnerability (ZSB-24003)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.17.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-24003 advisory. - Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...