https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:45:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-84477 <p><strong>Affected:</strong> WWBN AVideo</p> <p>AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication.</p> https://vulnerability.circl.lu/vuln/cve-2026-84477