WWBN AVideo Stored XSS Vulnerability Advisory and Fix

Vulnerability Overview Vulnerability Name: WWBN AVideo 29.2.0 Stored Cross-Site Scripting (XSS) Vulnerability Vulnerability Description: A stored Cross-Site Scripting (XSS) vulnerability exists in WWBN AVideo version 29.2.0. An attacker can inject malicious scripts into the YouPHPFlix2 template by uploading a video with the field containing malicious JavaScript code. This vulnerability allows attackers to execute malicious scripts in the browsers of any visitors, including administrators, thereby stealing session cookies or performing other malicious actions. Scope of Impact Affected Versions: WWBN AVideo 29.2.0 and earlier Affected Components: , , , and within the YouPHPFlix2 template Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Impact Scope: Changed Confidentiality: High Integrity: High Availability: High Remediation 1. Encoding Handling: Encode JavaScript strings before HTML escaping using functions such as , , , , and . 2. Use : Apply the function to the attribute. 3. Reject Non-HTTP Links: Reject non-HTTP links in the function, and escape quotes and angle bracket characters. POC Code ```php <?php require_once $_SERVER['DOCUMENT_ROOT'].'/functions.php'; $baseUrl = 'https://evil.example.com/'; $payloads = [ "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x"; "https://evil.example.com/x

Goal Reached Thanks to every supporter — we hit 100%!

WWBN AVideo Stored XSS Vulnerability Advisory and Fix

More from this source