CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

CVE-2022-26842

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

CVE-2022-26842

WWBN AVideo is affected by a reflected XSS (CVE-2022-26842) in the charts tab selection feature. The vulnerability stems from unsanitized use of the jump GET parameter in view/charts.php, enabling arbitrary Javascript execution when an authenticated user clicks or loads a crafted link. Affected v...