Threats tagged 'ghsa-6rvj-w837-rcgv'

1 threat

Threats tagged 'ghsa-6rvj-w837-rcgv'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.2%	CVE-2026-105086AVideo · Cross-site Scripting Critical9.3EPSS 0.2%2026-10-04CVE Database V5CVE-2026-105086 WWBN AVideo versions 12.4 through 29.2.0 contain a stored cross-site scripting (XSS) vulnerability. Authenticated uploaders can exploit this by submitting doubly-encoded entities in video titles, bypassing the safeString() sanitization function. This allows injection of malicious HTML that executes in various pages such as trending, gallery, embed, and playlist pages. EPSS 0.2%Vulnerability WWBN #ghsa-6rvj-w837-rcgv	CVE Database V5	2026-10-04

Showing 1–1 of 1 result