CVE-2017-12298

CVE-2017-12298 describes a cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center, stemming from insufficient input validation. An unauthenticated, remote attacker could exploit this by tricking a user into clicking a malicious link or by injecting malicious code into a user's request. With a CVSS score of 6.1 (Medium), a successful attack could lead to arbitrary script execution in the user's browser or access to sensitive browser-based information. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.