Medium severity6.1NVD Advisory· Published Apr 14, 2021· Updated Jun 17, 2026

CVE-2021-26812

Description

Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jitsi Meet/Jitsi Meet plugin for Moodledescription
Jitsi/Meet
cpe:2.3:a:jitsi:meet:*:*:*:*:*:moodle:*:*
Range: >=2.7,<=2.8.3
Moodle/moodle-mod_jitsillm-create
Range: 2.7 - 2.8.3
Moodle/Jitsi Meetllm-create
Range: 2.7 - 2.8.3

Patches

Vulnerability mechanics

References

github.com/udima-university/moodle-mod_jitsi/issues/67nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.078
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000