wwbn avideo vulnerabilities in 2023, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 8.8CVE-2023-32073EPSS 6.5%
WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to t…
- 5.4CVE-2023-30860EPSS 0.7%
WWBN AVideo is an open source video platform. In AVideo prior to version 12.4, a normal user can make a Meeting Schedule where the user can invite another user in that Meeting, but it does not properly sanitize the malicious characters whe…
- 8.8CVE-2023-30854EPSS 5.2%
AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fi…
- 6.1CVE-2023-25314EPSS 0.4%
Cross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information via the success parameter to /user.
- 9.8CVE-2023-25313EPSS 1.3%
OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature.