← Database

CVE-2022-48020

MEDIUM CVSS: 6.1 Published: 2023-05-12 Modified: 2026-06-17

Description

Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim user's browser.

Affected Platforms

Vinteo Video Core

Weakness Type

CWE-79, CWE-79

References