CVE-2021-26812

The connected Nuclei template confirms a Cross-Site Scripting (XSS) vulnerability in Moodle Jitsi Meet plugin versions 2.7–2.8.3, exploitable via the sessionpriv.php module. An attacker can craft a malicious URL that, when clicked by a user, executes JavaScript in the victim’s browser. Reported i...

CVE-2021-26812

Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...