CVE-2026-33717

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the "downloadVideoFromDownloadURL" function in "objects/aVideoEncoder.json.php" saves remote content to a web-accessible temporary directory using the original URL's filename and extension including ".php". By...