Skip to content

CVE record · 1 source

CVE-2026-126806

CVSS 8.7

WWBN AVideo 14.3 through 29.7.1 contains a stored cross-site scripting vulnerability that allows uploaders to inject scripts via the…

Vendor: WWBN
Product: AVideo
CVSS v3.1: 8.7 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Weakness: CWE-79

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 2h ago

WWBN AVideo 14.3 through 29.7.1 contains a stored cross-site scripting vulnerability that allows uploaders to inject scripts via the…

WWBN AVideo 14.3 through 29.7.1 contains a stored cross-site scripting vulnerability that allows uploaders to inject scripts via the videoDownloadedLink value stored unescaped through objects/aVideoEncoder.json.php. Attackers can…

CVSS 8.7 CVE-2026-126806 WWBN