World Wide Broadcast Network AVideo-Encoder Cross-site Scripting Vulnerability

Versions prior to AVideo-Encoder 8.1.0 of the World Wide Broadcast Network contain a cross-site scripting vulnerability. This vulnerability arises because view/queue.php utilizes pathinfo when handling fileURI values controlled by callers. Additionally, setTitle is used to store filenames without...