CVE-2026-33767

WWBN AVideo is an open source video platform. In versions up to and including 26.0, in "objects/like.php", the "getLike" method constructs a SQL query using a prepared statement placeholder "?" for "usersid" but directly concatenates "$this-videosid" into the query string without parameterization...