Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-27642 1 Bigbluebutton 1 Greenlight 2024-11-21 6.1 Medium
A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.
CVE-2020-26163 1 Bigbluebutton 1 Greenlight 2024-11-21 8.8 High
BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link.