Threats tagged 'ghsa-7qv6-qqv7-4w43'

A cross-site scripting (XSS) vulnerability exists in the PlaylistOwnerUsersId parameter of the managerPlaylists functionality in WWBN AVideo 14.4 and the dev master commit 8a8954ff. This flaw allows an attacker to execute arbitrary JavaScript by tricking a user into visiting a specially crafted webpage. The vulnerability has a high severity score of 9.6 and affects unauthenticated users with user interaction required.