Security Advisory

CVE-2025-66823

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-30 00:00:00

Last updated 2026-01-02 14:40:23

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).

← Browse all CVEs View on cve.org ↗