1 matches found
CVE-2026-34716: Improper Neutralization of Input During Web Page Generation
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo YPTSocket plugin's caller feature renders incoming call notifications using the jQuery Toast Plugin, passing the caller's display name directly as the heading parameter. The toast plugin constructs the heading as...
6.4CVSS6.1AI score0.00313EPSS
SaveExploits1References3
20