Threats tagged 'ghsa-r8qx-fh67-vh4r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 1.3%	CVE-2025-36548cross-site scripting (xss) vulnerability exists High8.3EPSS 1.3%2025-07-24GCVE DatabaseCVE-2025-36548 A cross-site scripting (XSS) vulnerability exists in the LoginWordPress loginForm cancelUri parameter of WWBN AVideo 14.4 and the dev master commit 8a8954ff. This flaw allows an attacker to execute arbitrary JavaScript by tricking a user into visiting a crafted webpage. The vulnerability requires user interaction and has a high complexity to exploit due to the need for a specially crafted HTTP request. EPSS 1.3%Report on CVE-2025-36548 Vulnerability CWE-79 #ghsa-r8qx-fh67-vh4r	GCVE Database	2025-07-24

Page 1 of 1