Threats tagged 'ghsa-q8hh-q8j4-4vqq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.6	CVE-2025-41420cross-site scripting (xss) vulnerability exists Critical9.62025-07-24GCVE DatabaseCVE-2025-41420 A cross-site scripting (XSS) vulnerability exists in the userLogin cancelUri parameter of WWBN AVideo version 14.4 and the development master commit 8a8954ff. This flaw allows an attacker to execute arbitrary JavaScript by crafting a malicious HTTP request that triggers the vulnerability when a user visits a specially crafted webpage. Report on CVE-2025-41420 Vulnerability CWE-79 #ghsa-q8hh-q8j4-4vqq	GCVE Database	2025-07-24

Page 1 of 1