{"vulnerability": "CVE-2026-89249", "sightings": [{"uuid": "4a61c49a-1a31-403d-af99-d518a1be8501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89249", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvaowhqh2r2j", "content": "CVE-2026-89249 - avideo\nThe YPTWallet add\u2011on in AVideo stores cryptocurrency wallet information without cleaning it first. When an administrator opens the page that shows pending withdrawals, any hidden code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-11T13:40:07.434030Z"}, {"uuid": "d9312e82-465a-4eb4-85ab-ea4097d253e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89249", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvaqh6ljct2t", "content": "\ud83d\udea8 CVE-2026-89249 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89249\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T14:07:20.770277Z"}]}