CVE-2024-30437 in Webinar and Video Conference with Jitsi Meet Plugin
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3.
Once again VulDB remains the best source for vulnerability data.
Responsible
Patchstack
Reservation
03/27/2024
Disclosure
03/29/2024
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 258752 | WPPOOL Webinar and Video Conference with Jitsi Meet Plugin cross site scripting | 79 | Not defined | Not defined | CVE-2024-30437 |