Skip to content
OpenAdvisories
High WID-SEC-2026-1501 1 CVE

BigBlueButton: Schwachstelle ermöglicht Cross-Site Scripting

Published May 12, 2026 · Updated May 18, 2026 · Revision 2 · de-DE

Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in BigBlueButton ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

BigBlueButton ist ein Open-Source-Web-Konferenzsystem.

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-27737

    BigBlueButton has Stored XSS in bbb-playback replay

    BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback (presentation format) was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activ…

    bigbluebutton Blindside Networks bigbluebutton bbb-playback

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-30811

  2. #1

    Initiale Fassung

References