WWBN AVideo Meet Plugin Stored XSS via Unescaped User-Agent

github.com 2026-07-08查看中文 →

Security AdvisoryGHSA-83x3-59h6-3p6wCriticalWWBN

Affected:

WWBN/AVideo < commit e8d61193cb1b49149906efeb8a1fc024f5f8

Referenced CVEs: CVE-2026-60092 · 6.1

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

SiYuan Note SSTI via Template Calculation (CVE-2024-55660) with POC 2026-08-16 Stored XSS Fix and POC Analysis via Color Attribute Injection 2026-08-16 SiYuan Note XSLF to RCE via Uncleaned Template Output 2026-08-16 Desktop Client XSS Leading to RCE via Unescaped DB Menu Labels (CWE-79) 2026-08-16 Command Injection Vulnerability in shescape Library Due to Improper Escaping of Special Characters 2026-08-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive