Skip to content
OpenAdvisories

Product · Blindside Networks

BigBlueButton

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting

    The BigBlueButton plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the moderator code and viewer code fields in versions up to, and including, 3.0.0-beta.4 due to insufficient input sanitization and output escaping. This makes it poss…