CVE-2026-33723

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the "Subscribe::save" method in "objects/subscribe.php" concatenates the "$this-usersid" property directly into an INSERT SQL query without sanitization or parameterized binding. This property originates from...