Lucene search
Veracode Vulnerability DatabaseVERACODE:34990HistoryApr 06, 2022 - 9:30 a.m.
Cross-site Scripting (XSS)
2022-04-0609:30:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
cross-site scripting
vulnerability
getdeviceid
malicious script
browser injection
php
EPSS
0.001
Percentile
33.5%
wwbn/avideo is vulnerable to cross-site scripting. The getDeviceID method does not properly handle the $device parameter, allowing an attacker to inject malicious script into victim’s browser via yptDevice to view/include/head.php.
Related
cvelist
cvelist
CVE-2022-27462
2022-04-05 15:37:22
prion
prion
Cross site scripting
2022-04-05 16:15:00
cve
cve
CVE-2022-27462
2022-04-05 16:15:16
osv
osv
CVE-2022-27462
2022-04-05 16:15:16
nvd
nvd
CVE-2022-27462
2022-04-05 16:15:16