THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-66823 (MEDIUM 5.4) — An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference ur

[NVD] CVE-2025-66823 (MEDIUM 5.4) — An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference ur

lownvdPublished 2025-12-30

CVE-2025-66823 CVSS: 5.4 MEDIUM Published: 2025-12-30T20:16:01.413

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).

Indicators of compromise

CVE-2025-66823cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-66823