CVE-2026-33761

CVE-2026-33761 (AVideo Scheduler endpoints) : In versions up to 26.0, three unauthenticated endpoints under plugin/Scheduler (Scheduler_commands/list.json.php, Emails_messages/list.json.php, Email_to_user/list.json.php) expose full database contents via getAll(), leaking internal callback URLs, p...