Cross-Site Scripting Vulnerability in Cisco Webex Meetings User Profiles

CVE-2025-20328

What is CVE-2025-20328?

A vulnerability in the user profile component of Cisco Webex Meetings has the potential to allow an authenticated, remote attacker with low privileges to perform a cross-site scripting (XSS) attack. This issue arises from inadequate validation of user input within the web-based interface, which could be exploited if a user is lured into clicking a malicious link. A successful attack could compromise user data and privacy. Cisco has patched the vulnerability, ensuring that no action is needed from customers to protect their accounts.

References