CVE-2026-61572

AVideo, a video-sharing platform, is vulnerable to unauthenticated full-response Server-Side Request Forgery (SSRF) . The root cause lies in objects/functions.php, where url_get_contents accepts caller-controlled destinations following only basic syntax validation, failing to block private, loopb...