CVE-2025-66823 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edi…
Medium CVSS: 5.4

CVE-2025-66823

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).
Vendor
Trueconf
Product
Server
CWE
CWE-79
Yayın Tarihi
2025-12-30 20:16:01
Güncelleme
2026-01-07 15:39:03
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Server MEDIUM Trueconf 2025

Referanslar

https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66823/README.md https://trueconf.com https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66823/README.md