{"metadata": {"vulnerability": "cve-2026-54458", "count": 17, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-06-04T14:49:58Z", "date_only": false, "value": "2026-06-04T14:49:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35", "record": "CVE-2026-54458", "field": "creation_timestamp", "uuid": "384291cc-4796-4d4d-b8cb-d809ef562c4f", "url": "https://github.com/WWBN/AVideo/security/advisories/GHSA-8whc-2wmv-ww35"}, {"timestamp": "2026-06-04T18:57:50Z", "date_only": false, "value": "2026-06-04T18:57:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8WHC-2WMV-WW35", "record": "GHSA-8WHC-2WMV-WW35", "field": "published"}, {"timestamp": "2026-06-15T15:30:40.318Z", "date_only": false, "value": "2026-06-15T15:30:40.318Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-54458", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-22T14:36:02Z", "date_only": false, "value": "2026-06-22T14:36:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8WHC-2WMV-WW35", "record": "GHSA-8WHC-2WMV-WW35", "field": "modified"}, {"timestamp": "2026-07-15T21:33:27.190Z", "date_only": false, "value": "2026-07-15T21:33:27.190Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-54458", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-15T21:33:27.190Z", "date_only": false, "value": "2026-07-15T21:33:27.190Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-54458", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T22:04:05.762Z", "date_only": false, "value": "2026-07-15T22:04:05.762137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq2bpz642l", "record": "CVE-2026-54458", "field": "creation_timestamp", "uuid": "452d3b45-2d89-4193-861a-74ba5bc2c092", "content": "CVE-2026-54458 - wwbn/avideo\nThe AVideo YPTSocket plugin has a security flaw that allows an attacker to inject malicious code into the website's content, potentially affecting administrators viewing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wwbn #PHP #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq2bpz642l"}, {"timestamp": "2026-07-15T22:17:19.160Z", "date_only": false, "value": "2026-07-15T22:17:19.160", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-54458", "record": "FKIE_CVE-2026-54458", "field": "published"}, {"timestamp": "2026-07-15T23:01:02.355Z", "date_only": false, "value": "2026-07-15T23:01:02.355479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpta3kei225", "record": "CVE-2026-54458", "field": "creation_timestamp", "uuid": "ccfcb0a0-6734-40db-aed5-8eed1e1dfe4c", "content": "\ud83d\udd34 CVE-2026-54458 - Critical (9.6)\n\nWWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-S...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54458/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpta3kei225"}, {"timestamp": "2026-07-16T00:00:43.633Z", "date_only": false, "value": "2026-07-16T00:00:43.633185Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116926712479422983", "record": "cve-2026-54458", "field": "creation_timestamp", "uuid": "29aeb0f8-d0bb-459d-b4cd-06f7e18b5b00", "content": "CVE-2026-54458 (CRITICAL, CVSS 9.6): WWBN AVideo (<29.0) suffers stored DOM XSS in YPTSocket plugin. Unauthenticated attackers can hijack admin sessions. Patch now \u2014 upgrade to v29.0. https://radar.offseq.com/threat/cve-2026-54458-cwe-79-improper-neutralization-of-i-57743e6d03256988 #OffSeq #XSS #WWBNA Video #infosec", "url": "https://infosec.exchange/users/offseq/statuses/116926712479422983"}, {"timestamp": "2026-07-16T00:00:44.539Z", "date_only": false, "value": "2026-07-16T00:00:44.539848Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqpwktbn4u2k", "record": "cve-2026-54458", "field": "creation_timestamp", "uuid": "f57c96d1-7a6e-4c7b-beb6-d75677c92d2a", "content": "WWBN AVideo <29.0 hit by CRITICAL XSS (CVE-2026-54458). Unauthenticated attackers can hijack admin sessions via YPTSocket plugin. Upgrade to v29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54458-cwe-79-improper-neutralization-of-i-57743e6d03256988 #OffSeq #XSS #AppSec", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mqpwktbn4u2k"}, {"timestamp": "2026-07-16T00:58:55.212Z", "date_only": false, "value": "2026-07-16T00:58:55.212411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzsv2mre2s", "record": "CVE-2026-54458", "field": "creation_timestamp", "uuid": "6c046487-4782-4aeb-ab2c-576ece65e858", "content": "CVE-2026-54458 - AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin\nCVE ID : CVE-2026-54458\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : WWBN AVideo is an open source video platform. Versi...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzsv2mre2s"}, {"timestamp": "2026-07-16T14:21:14.803Z", "date_only": false, "value": "2026-07-16T14:21:14.803192Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-54458", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-16T14:21:14.803Z", "date_only": false, "value": "2026-07-16T14:21:14.803192Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-54458", "record": "FKIE_CVE-2026-54458", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-16T15:12:06.414Z", "date_only": false, "value": "2026-07-16T15:12:06.414Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-54458", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-16T15:12:06.414Z", "date_only": false, "value": "2026-07-16T15:12:06.414Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-54458", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-16T16:19:13.120Z", "date_only": false, "value": "2026-07-16T16:19:13.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-54458", "record": "FKIE_CVE-2026-54458", "field": "lastModified"}]}