Cisco Webex Meetings Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the web-based user interface of Cisco Webex Meetings. This issue could have allowed an unauthenticated, remote attacker to execute arbitrary script code in the browser of a targeted user or access sensitive, browser-based information. The vulnerability arose from insufficient validation of user input, enabling an attacker to persuade a user to follow a malicious link. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed.

Impact

Exploitation of this vulnerability could have led to cross-site scripting, allowing for the execution of malicious scripts in the context of the user's browser.