VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jul 7, 2023· Updated Jun 17, 2026

CVE-2023-20133

CVE-2023-20133

Description

A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events (classic) programs, email templates, and survey questions. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

35
  • Cisco Systems, Inc./Webex Meetings34 versions
    cpe:2.3:a:cisco:webex_meetings:39.10:*:*:*:*:*:*:*+ 33 more
    • cpe:2.3:a:cisco:webex_meetings:39.10:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.11:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.8:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:39.9:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:40.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.10:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.11:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.12:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.8:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:42.9:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings:43.5.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 39.10
  • Cisco Systems, Inc./Webex Events (classic)llm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.