medium4.3
CVE-2023-28599
Zoom clients prior to 5.13.10 contain an HTML injection vulnerability.
Impact
Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victim to a malicious website during meeting creation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zoom | Zoom | before 5.13.10 |