Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

AVideo — Vulnerabilities & Security Advisories 344

All 344 CVE vulnerabilities found in AVideo, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities associated with AVideo, a video management and streaming platform, categorized under weak encryption and access control weaknesses. It aggregates a comprehensive collection of disclosed security issues affecting this specific product, covering historical reports from early releases through the most recent updates identified in the database. By accessing this resource, users can effectively track vendor advisories to stay informed about the latest patches and mitigation strategies released by the developers. The content allows security professionals to understand the prevalence and impact of specific weakness classes within the AVideo ecosystem, facilitating better risk assessment and compliance management. Additionally, researchers and administrators can look up a product's vulnerability history to analyze patterns in defect introduction and resolution over time. This structured view supports informed decision-making regarding upgrade paths and configuration hardening without needing to scour multiple external sources. The data serves as a centralized reference point for identifying known risks, helping organizations prioritize remediation efforts based on severity and exploitability. Whether you are a system administrator ensuring server stability or a security analyst evaluating the supply chain risk, this aggregation provides the necessary context to maintain a secure deployment of AVideo. It bridges the gap between raw CVE data and actionable security intelligence, offering a clear overview of the product's security posture and evolution.

Vendor: WWBN

CVE ID Title CVSS Severity Published
CVE-2026-90547 WWBN AVideo Missing Authorization via getBookmarks.json.php CWE-862 5.3 Medium 2026-09-12
CVE-2026-90548 WWBN AVideo Missing Authorization in ImageGallery list.json.php CWE-200 5.3 Medium 2026-09-12
CVE-2026-90546 WWBN AVideo Missing Authorization via like.json.php CWE-862 4.3 Medium 2026-09-12
CVE-2026-90545 WWBN AVideo Missing Authorization via commentAddNew.json.php CWE-862 4.3 Medium 2026-09-12
CVE-2026-90543 WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php CWE-306 5.3 Medium 2026-09-12
CVE-2026-90544 WWBN AVideo Missing Authorization via videoAddViewCount.json.php CWE-862 4.3 Medium 2026-09-12
CVE-2026-90542 WWBN AVideo Missing Authorization via remindMe.json.php CWE-639 5.4 Medium 2026-09-12
CVE-2026-90541 WWBN AVideo Unauthenticated Information Disclosure via menus.json.php CWE-200 5.3 Medium 2026-09-12
CVE-2026-90540 WWBN AVideo Missing Authorization via playListAddVideo.json.php CWE-862 4.3 Medium 2026-09-12
CVE-2026-90539 WWBN AVideo Missing Authentication via menuItems.json.php CWE-200 5.3 Medium 2026-09-12
CVE-2026-90537 WWBN AVideo Scheduler sendEmail Missing Authorization via Token CWE-862 8.2 High 2026-09-12
CVE-2026-90538 WWBN AVideo Missing Authorization via playlistsFromUser.json.php CWE-200 5.3 Medium 2026-09-12
CVE-2026-90536 WWBN AVideo Missing Authorization via adsInfo API Endpoint CWE-200 5.3 Medium 2026-09-12
CVE-2026-89257 AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check CWE-639 5.4 Medium 2026-09-11
CVE-2026-89256 AVideo Bookmark Plugin Stored XSS via Chapter Names CWE-79 8.7 High 2026-09-11
CVE-2026-89255 AVideo LoginControl Stored XSS via PGP Public Key CWE-79 8.7 High 2026-09-11
CVE-2026-89254 AVideo CustomizeUser Stored XSS via field_name Parameter CWE-79 8.7 High 2026-09-11
CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button CWE-79 8.7 High 2026-09-11
CVE-2026-89252 AVideo Missing Authorization in addLiveLink.php LiveLink Update CWE-639 6.5 Medium 2026-09-11
CVE-2026-89251 AVideo Missing Authorization via AD_Server log.php Wallet Credit CWE-345 6.5 Medium 2026-09-11
CVE-2026-89250 WWBN AVideo Unauthenticated File Read via getRecordedFile.php CWE-306 7.5 High 2026-09-11
CVE-2026-89249 AVideo YPTWallet Stored XSS via CryptoWallet Configuration CWE-79 8.7 High 2026-09-11
CVE-2026-89247 WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php CWE-91 6.1 Medium 2026-09-11
CVE-2026-89248 AVideo WebRTC Plugin Information Disclosure via status.json.php CWE-200 5.3 Medium 2026-09-11
CVE-2026-89246 WWBN AVideo CSV Formula Injection via myComments.download.php CWE-1236 5.4 Medium 2026-09-11
CVE-2026-89245 WWBN AVideo Cross-Site Request Forgery via playlistRemove.php CWE-352 6.5 Medium 2026-09-11
CVE-2026-89244 WWBN AVideo Reflected XSS via Gallery Category getBackURL CWE-79 6.1 Medium 2026-09-11
CVE-2026-89243 WWBN AVideo Stored XSS via UserGroups setGroup_name CWE-79 8.1 High 2026-09-11
CVE-2026-89242 WWBN AVideo Unauthenticated SSRF via login.json.php CWE-918 7.2 High 2026-09-11
CVE-2026-89240 WWBN AVideo Reflected XSS via confirmLivePassword.php CWE-79 6.1 Medium 2026-09-11

All 344 known CVE vulnerabilities affecting AVideo with full Chinese analysis, references, and POCs where available.