CVE-2026-33319

WWBN AVideo is an open source video platform. Prior to version 26.0, the "uploadVideoToLinkedIn" method in the SocialMediaPublisher plugin constructs a shell command by directly interpolating an upload URL received from LinkedIn's API response, without sanitization via "escapeshellarg". If an...