CVE-2023-47861

A cross-site scripting xss vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this...

CVE-2023-47861

Talos reports a high-severity (CVSS v3.1 9.0) cross-site scripting (XSS) vulnerability in WWBN AVideo 11.6 and the dev master commit 15fed957fb, specifically in channelBody.php user name handling. An attacker can lure a user to visit a crafted page, triggering arbitrary JavaScript execution (stor...