Threats tagged 'ghsa-m6h8-gp7c-3qmv'

1 threat

Threats tagged 'ghsa-m6h8-gp7c-3qmv'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.2%	CVE-2026-105089AVideo · Cross-site Scripting Critical9.3EPSS 0.2%2026-10-04CVE Database V5CVE-2026-105089 WWBN AVideo versions up to 29.2.0 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with upload permissions to inject malicious scripts via the video trailer URL, which is rendered without proper escaping in certain templates and playlists. Exploitation can lead to arbitrary JavaScript execution in other users' browsers. EPSS 0.2%Vulnerability WWBN #ghsa-m6h8-gp7c-3qmv	CVE Database V5	2026-10-04

Showing 1–1 of 1 result