CVE-2022-48020: Vinteo Video Core

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim user's browser.

Affected products

• Vinteo Video Core: version 2.36.4 only

Published 2023-05-12. Last modified 2026-06-17.