Skip to content
OpenAdvisories

Vendor

Blindside Networks

3 known vulnerabilities.

Products

BigBlueButton 2 scalite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-27737

    BigBlueButton has Stored XSS in bbb-playback replay

    BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.19, the recording playback (presentation format) was not sanitizing user's input in public chat. This allowed for a malicious actor to craft and carry out a targeted XSS attack, activ…

    bigbluebutton Blindside Networks bigbluebutton bbb-playback
  • Medium 6.4
    CVE-2023-7296

    BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting

    The BigBlueButton plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the moderator code and viewer code fields in versions up to, and including, 3.0.0-beta.4 due to insufficient input sanitization and output escaping. This makes it poss…

    Blindside Networks BigBlueButton Web / CMS