Cisco has disclosed that it is in the process of developing a fix for a cross-site scripting vulnerability impacting its Prime Collaboration Deployment offering, SecurityWeek reports. Threat actors could leverage the flaw, tracked as CVE-2023-20060, by luring targets into clicking a crafted link, which would facilitate arbitrary script code execution “in the context of the affected interface or access sensitive, browser-based information,”

Read full article on SC Magazine