CVE-2016-2163

MEDIUM

Apache Openmeetings < 3.1.0 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.

References (4)

Scores

CVSS v3 6.1
EPSS 0.0273
EPSS Percentile 85.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status draft

Affected Products (2)

apache/openmeetings < 3.1.0
org.apache.openmeetings/openmeetings-parent < 3.1.1Maven

Timeline

Published Apr 11, 2016
Tracked Since Feb 18, 2026