cbcvebase.
CVE-2023-20133
published 2023-07-07

CVE-2023-20133: A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)…

PriorityP427medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.64%
46.6th percentile
A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events (classic) programs, email templates, and survey questions. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected

65 ranges· showing 25
VendorProductVersion rangeFixed in
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——
ciscocisco_webex_meetings——

CVSS provenance

nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
vendor_cisco5.4MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.