Skip to content
OpenAdvisories

Product · WWBN

AVideo-Encoder

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-61575

    AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles

    AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI` and stores its filename through `setTitle` in `encoder_queue.title` without neutralization. `fileURI` is not in the `objects/security.php` …

    WWBN AVideo-Encoder
  • Medium 6.1
    CVE-2026-61573

    AVideo-Encoder: reflected cross-site scripting in the login interface

    AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and JavaScript without output encoding. In `view/index.php`, `webSiteRootURL` is returned verbatim by `Streamer::getStreamerURL()` in `objects/…

    WWBN AVideo-Encoder