Vulnerabilidades en WWBN
339 resultadosCVE-2026-88871MEDIUMWWBN AVideo CustomizeUser setSubscribers CSRF via GETEPSS 0.2%CVE-2026-33683MEDIUMAVideo vulnerable to Stored XSS via html_entity_decode() Reversing xss_esc() Sanitization in Channel About FieldEPSS 0.2%CVE-2026-92582HIGHAVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF BypassEPSS 0.2%CVE-2026-88873HIGHWWBN AVideo Cross-Site Request Forgery via logArchive.json.phpEPSS 0.2%CVE-2026-33690MEDIUMAVideo vulnerable to IP Address Spoofing via Untrusted HTTP Headers in getRealIpAddr()EPSS 0.2%CVE-2026-61575MEDIUMAVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titlesEPSS 0.2%CVE-2026-39366MEDIUMWWBN AVideo Affected by a PayPal IPN Replay Attack Enabling Wallet Balance Inflation via Missing Transaction Deduplication in ipn.phpEPSS 0.2%CVE-2026-33649HIGHAVideo's GET-Based CSRF in setPermission.json.php Enables Privilege Escalation via Arbitrary Permission ModificationEPSS 0.2%CVE-2026-85162HIGHAVideo through c91b5975d CSRF via saveLive.phpEPSS 0.2%CVE-2026-86724HIGHAVideo YPTWallet saveBalance.php Cross-Site Request ForgeryEPSS 0.2%CVE-2026-89245HIGHWWBN AVideo Cross-Site Request Forgery via playlistRemove.phpEPSS 0.2%CVE-2026-41061MEDIUMWWBN AVideo Vulnerable to stored XSS via Unanchored Duration Regex in Video Encoder ReceiverEPSS 0.2%CVE-2026-88870HIGHWWBN AVideo LoginControl PGP Key CSRF via GET RequestEPSS 0.2%CVE-2026-40925HIGHWWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and SMTP CredentialsEPSS 0.2%CVE-2026-123486MEDIUMWWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.phpEPSS 0.2%CVE-2026-40926HIGHWWBN AVideo Vulnerable to CSRF in Admin JSON Endpoints (Category CRUD, Plugin Update Script)EPSS 0.2%CVE-2026-114048MEDIUMWWBN AVideo before 24.0 CSRF via Legacy Playlist and Video EndpointsEPSS 0.2%CVE-2026-58001MEDIUMWWBN AVideo Cross-Site Request Forgery via videoEditLight.phpEPSS 0.2%CVE-2026-58002HIGHWWBN AVideo Authorization Bypass via Users_affiliations add.json.phpEPSS 0.2%CVE-2026-33731MEDIUMAVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment DataEPSS 0.2%