Security Advisory

CVE-2022-48020

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-12 00:00:00
Last updated 2025-02-05 17:28:41
Assigner mitre
State PUBLISHED

Description

Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim users browser.