CVE-2026-58003

WWBN AVideo through commit 9c39d8c8 is affected by a cross-site request forgery (CSRF) vulnerability in the releaseVideoNow.json.php endpoint. The endpoint lacks authenticity checks and accepts GET requests , allowing an attacker to craft a malicious cross-site GET request carrying an administrat...