References https://nvd.nist.gov/vuln/detail/CVE-2025-20328 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-55bv8hhm https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-webex-xss-55bv8hhm.html https://access.redhat.com/security/cve/CVE-2025-20328 https://github.com/advisories/GHSA-6mp7-m2x9-pp98 https://cve.circl.lu/cve/CVE-2025-20328 https://cve.imfht.com/detail/CVE-2025-20328 https://www.systemtek.co.uk/2025/09/cisco-webex-meetings-cross-site-scripting-vulnerability-cve-2025-20328/
Related Vulnerabilities(CVE-2025-20291)思科Webex会议系统URL验证不足导致开放重定向漏洞PoCcisco-webex-log4j-rce: Cisco WebEx - Remote Code Execution (Apache Log4j)ClamAV CVE-2024-20328 命令注入漏洞Mozilla Firefox WebExtensions SettingContent-ms策略绕过漏洞