Cross-Site Scripting Vulnerability in Cisco Webex Meetings User Profiles

CVE-2025-20328

What is CVE-2025-20328?

A vulnerability in the user profile component of Cisco Webex Meetings has the potential to allow an authenticated, remote attacker with low privileges to perform a cross-site scripting (XSS) attack. This issue arises from inadequate validation of user input within the web-based interface, which could be exploited if a user is lured into clicking a malicious link. A successful attack could compromise user data and privacy. Cisco has patched the vulnerability, ensuring that no action is needed from customers to protect their accounts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References