CVE-2026-89249

AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a stored XSS in the YPTWallet plugin. User-supplied CryptoWallet values are base64-encoded but not HTML-escaped before being stored in wallet_log.information. When administrators view pending withdrawal requests in pendingR...

PT-2026-89852

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the YPTWallet plugin where user-supplied CryptoWallet values are base64-encoded but not HTML-escaped before storage in wallet log.information. Administrators viewing pending...

SUSE CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...

CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...

UBUNTU-CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...