BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.

Published Apr 23, 2020 · Updated Aug 4, 2024 · Assigned by mitre