The host is installed with Zoom Client before 5.1.0 and is prone to an HTML injection vulnerability. A flaw is present in the application, which fails to handle an issues in remote control request. Successful exploitation leads to social engineering attacks.