Reflected-XSS-on-Opentext-Portal-v7.4.4

Vulnerabilidad de Cross-site scripting XSS en OpenText Portal v7.4.4 permite a atacantes remotos inyectar script web arbitrario o código HTML a través del parámetro URI vgnextoid. Vector de ataque: inyección de JavaScript en el parámetro vgnextoid precedido de "--" secuencia de cierre de comentar...

CVE-2026-89239 WWBN AVideo Reflected XSS via Referer Header Comment Breakout

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in the showAlertMessage function that inserts the raw Referer header into a JavaScript comment without encoding. Attackers can craft a Referer header containing / to close t...

CVE-2026-89239

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1 ) contains a reflected XSS in the showAlertMessage() function. The function inserts the raw Referer header into a JavaScript comment without encoding, allowing an attacker to supply a Referer value containing */ to break out of ...