Wwbn Avideo 12.4 Through 29.2.0 Stored Xss Via Double Encoded Video Title

Back www.vulncheck.com

Wwbn Avideo 12.4 Through 29.2.0 Stored Xss Via Double Encoded Video Title

www.vulncheck.com • October 4, 2026

Share: View original

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

GitHub Security Advisory (GHSA-q62w-927x-vhhf)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Stored XSS Vulnerabilities in Wwbn Avideo Affect Multiple Versions Wwbn Avideo versions 12.4 through 29.2.0 are affected by two stored cross-site scripting (XSS) vulnerabilities. The first vulnerability involves double-encoded video titles, while the second is related to the Trailer1 in YouPHPFlix2 templates. Both vulnerabilities are categorized under CWE-79, indicating improper neutralization of input during web page generation. The vulnerabilities could allow attackers to execute arbitrary scripts in the context of the user's browser. As of now, there are no reports of, but users are advised to prioritize patching. GitHub Security Advisories have been issued for both vulnerabilities, identified as GHSA-q62w-927x-vhhf and GHSA-6wfr-c7fw-4xvw. Administrators are encouraged to review their systems and apply necessary updates to mitigate potential risks. 42

Extracted Entities

CWE Weaknesses (1)

CWE-79 - Cross-site Scripting (xss)

Vulnerabilities (2)