{"uuid": "f57c96d1-7a6e-4c7b-beb6-d75677c92d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54458", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqpwktbn4u2k", "content": "WWBN AVideo <29.0 hit by CRITICAL XSS (CVE-2026-54458). Unauthenticated attackers can hijack admin sessions via YPTSocket plugin. Upgrade to v29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54458-cwe-79-improper-neutralization-of-i-57743e6d03256988 #OffSeq #XSS #AppSec", "creation_timestamp": "2026-07-16T00:00:44.539848Z"}