Vulnerabilidades en WWBN
339 resultadosCVE-2026-105086CRITICALWWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video TitleEPSS 0.3%CVE-2026-105089CRITICALWWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 TemplatesEPSS 0.3%CVE-2026-92581MEDIUMAVideo through 29.0 Like Counter Desynchronization via Array ParameterEPSS 0.3%CVE-2026-43880MEDIUMWWBN AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Allows Phishing from Site's Legitimate From AddressEPSS 0.3%CVE-2026-85159MEDIUMAVideo Reflected XSS via cancelUri in userLogin.phpEPSS 0.3%CVE-2026-34737MEDIUMAVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() BugEPSS 0.3%CVE-2026-85577MEDIUMAVideo userLogin.php Reflected XSS via error parameterEPSS 0.3%CVE-2026-34716MEDIUMAVideo: DOM XSS via Unsanitized Display Name in WebSocket Call NotificationEPSS 0.3%CVE-2026-33688MEDIUMAVideo has Pre-Captcha User Enumeration and Account Status Disclosure in Password Recovery EndpointEPSS 0.3%CVE-2026-61569HIGHAVideo-Encoder: pre-authentication streamer-login SQL injectionEPSS 0.3%CVE-2026-61571HIGHAVideo-Encoder: missing authentication on control and status endpointsEPSS 0.3%CVE-2026-89242MEDIUMWWBN AVideo Unauthenticated SSRF via login.json.phpEPSS 0.3%CVE-2026-100630MEDIUMAVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 FieldEPSS 0.3%CVE-2026-56380MEDIUMAVideo feed/index.php Exposure of Channel Owner Email AddressEPSS 0.3%CVE-2026-33294MEDIUMAVideo has SSRF in BulkEmbed Thumbnail Fetch that Allows Reading Internal Network ResourcesEPSS 0.3%CVE-2026-92579MEDIUMAVideo through 29.0 Broken Access Control via CSRF Exemption Basename CollisionEPSS 0.3%CVE-2026-27732HIGHAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.phpEPSS 0.3%CVE-2026-40907MEDIUMWWBN AVideo has IDOR in Live Restreams list.json.php that Exposes Other Users' Stream Keys and OAuth TokensEPSS 0.3%CVE-2026-27568MEDIUMAVideo has Stored Cross-Site Scripting via Markdown Comment InjectionEPSS 0.3%CVE-2026-90544MEDIUMWWBN AVideo Missing Authorization via videoAddViewCount.json.phpEPSS 0.3%