The vulnerability of the /admin/group/list/ component of the TrueConf Server allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the /admin/group/list/ component of the TrueConf Server relates to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2017-20116

A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The manipulation of the argument checkedgroupid leads to basic cross site scripting Reflected. It is possible to launch the attack remotely. T...