A vulnerability was found in steveseguin vdo.ninja up to 28.3. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the file examples/control.html. Performing manipulation of the argument room results in cross site scripting.

This vulnerability is reported as CVE-2025-62613. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.