Zoom Workplace for Windows Cross-Site Scripting Vulnerability

Vulnerability

A cross-site scripting vulnerability has been identified in Zoom Workplace for Windows, affecting versions prior to 6.5.10. This vulnerability may allow an unauthenticated user to manipulate integrity through network access.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.

Remediation

Users are advised to update to the latest version of Zoom Workplace for Windows. The latest version can be downloaded from the Zoom Download Center.

Added: Nov 13, 2025, 3:27 PM
Updated: Nov 13, 2025, 3:27 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
4.4
remediation
7.7
relevance
1.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.