UCHIDA YOKO wivia 5 Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in all versions of wivia 5, a product by UCHIDA YOKO CO., LTD. When a user connects to an affected device and performs a specific action, an arbitrary script could be executed in the web browser of the moderator user.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary scripts in the web browser of a connected moderator user.

Remediation

Users are advised to stop using wivia 5, as it is no longer supported. Consider migrating to the successor product, wivia R+. For more information, visit the UCHIDA YOKO support page.