Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-47861
HistoryJan 10, 2024 - 4:15 p.m.

Cross site scripting

2024-01-1016:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site scripting
vulnerability
wwbn avideo 11.6
http request
javascript execution
attacker

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.9%

A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

CPENameOperatorVersion
avideoeq11.6
avideoeq15.0.0-fed957-fb

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.9%

Related for PRION:CVE-2023-47861