CVE-2024-34899

WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...

AVideo 12.4 Code Injection

============================================================================================================================================= | Title : AVideo 12.4 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits ...

Duplicate Advisory: AVideo cross-site scripting vulnerability in the view/about.php page

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f98p-2hc5-fm7v. This link is maintained to preserve external references. Original Description WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...

CVE-2024-34899

WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...

CVE-2024-34899

WWBN AVideo 12.4 is vulnerable to Cross Site Scripting XSS...

CVE-2024-34899

CVE-2024-34899 corresponds to a Cross-Site Scripting (XSS) vulnerability in WWBN AVideo 12.4. Connected sources confirm the issue stems from insufficient input sanitization, with explicit mentions of XSS in the view/about.php page (user-agent header echoed without sanitization) and broader XSS de...