CVE-2023-25313

9.8 criticalEPSS 1.3%

Critical (9.8) in wwbn avideo. EPSS 1.3% chance of exploitation in the next 30 days.

OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2023-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wwbn:avideo

References

https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw
https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw

Check your stack JSON