01 Record

CVE-2026-55491

BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name

MediumPUBLISHEDCNA: GitHub_M

Base score5.4 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

02 Description

BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name

Published

2026-08-20 21:35Z1 DAY AGO

Last updated

2026-08-21 15:50Z9 HR AGO

Reserved

2026-06-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 5.4)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

28f63509c80968d2c7f19c430e565d2866fcdeeb189b9e7471150ae773cbe55c

VendorProductVersionsPlatforms

bigbluebuttonbigbluebutton< 3.0.29—