CVE-2021-1351: 
Cisco Webex Meetings vulnerability analysis and mitigation

A vulnerability in the web-based interface of Cisco Webex Meetings (CVE-2021-1351) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against users of the web-based interface. The vulnerability was discovered and disclosed on February 17, 2021, affecting the cloud-based Cisco Webex Meetings service (Cisco Advisory).

The vulnerability stems from insufficient validation of user-supplied input by the web-based interface of the affected service. The vulnerability has been assigned a CVSS base score of 6.1 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X (Cisco Advisory).

A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information (Cisco Advisory).

An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability in the wild (Cisco Advisory).

Cisco has addressed this vulnerability in the cloud-based Cisco Webex Meetings service, and no user action is required. There are no workarounds available for this vulnerability. Customers can determine the current remediation status or software version by using the Help function in the service GUI (Cisco Advisory).