EUVD-2026-67684

WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...

CVE-2026-81733

WWBN AVideo through version 30.0 (and master up to commit 4cb576e) is affected by a cross-site request forgery (CSRF) vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint accepts customUrl, customMessage, and autoRedirect parameters via a GET request and only verifies that the ...