← All advisories

Medium severity6.1NVD Advisory· Published Oct 22, 2020· Updated Jun 17, 2026

CVE-2020-27642

CVE-2020-27642

Description

A cross-site scripting (XSS) vulnerability exists in the 'merge account' functionality in admins.js in BigBlueButton Greenlight 2.7.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Bigbluebutton/Greenlight3 versions
cpe:2.3:a:bigbluebutton:greenlight:2.7.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bigbluebutton:greenlight:2.7.6:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2.7.6

Patches

Vulnerability mechanics

References

1

github.com/bigbluebutton/greenlight/pull/2214nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.