CVE-2022-32770

WWBN AVideo 11.6 and dev master commit 3f7c0364 are affected by a footer alerts XSS (CVE-2022-32770) due to insufficient sanitization of the toast parameter. The vulnerability allows arbitrary JavaScript execution in an authenticated user context by crafting HTTP requests; PoCs show vector usage ...

PT-2022-21452 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 and dev master commit 3f7c0364 Description: A cross-site scripting xss vulnerability exists in the footer alerts functionality. This issue allows for arbitrary Javascript execution through a specially-crafted HTTP...