Threats tagged 'ghsa-92wf-68v3-h8h4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2026-90539WWBN AVideo · Information Exposure Medium6.9EPSS 0.4%2026-09-12CVE Database V5CVE-2026-90539 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php endpoint that allows unauthenticated attackers to read inactive admin menu items by submitting a POST request with a menuId parameter. Attackers can retrieve hidden menu item URLs including embedded admin-tool secret query parameters not exposed in the public navbar. EPSS 0.4%Vulnerability #ghsa-92wf-68v3-h8h4	CVE Database V5	2026-09-12

Page 1 of 1