CVE-2026-61573

AVideo, a video-sharing platform, contains a reflected cross-site scripting (XSS) vulnerability in its anonymous login interface prior to version 8.1.0 . The root cause is the lack of output encoding for request values. Specifically, webSiteRootURL is returned verbatim by Streamer::getStreamerURL...