2 matches found
CVE-2026-89255 AVideo LoginControl Stored XSS via PGP Public Key
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...
9.3CVSS0.00367EPSS
SaveExploits0References2
EUVD-2026-76067
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plugin that fails to HTML-encode PGP public keys echoed into a textarea element. An authenticated attacker can inject malicious JavaScript by submitting a crafte...
9.3CVSS5.6AI score0.00367EPSS
SaveExploits0References2
20