Description
Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zoom Video Communications | Zoom for Android | before 5.13.10 | — |
| Zoom Video Communications | Zoom for iOS | before 5.13.10 | — |
| Zoom Video Communications | Zoom for Linux | before 5.13.10 | — |
| Zoom Video Communications | Zoom for macOS | before 5.13.10 | — |
| Zoom Video Communications | Zoom for Windows | before 5.13.10 | — |