CVE record · 1 source
CVE-2026-126810
CVSS 5.4WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the…
- Vendor
- WWBN
- Product
- AVideo
- CVSS v3.1
- 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the…
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted…