CoreCVE
Back

MEDIUM

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364

Published Aug 22, 2022

Description

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.This vulnerability arrises from the "success" parameter which is inserted into the document with insufficient sanitization.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner talos
Published Aug 22, 2022
Updated Apr 15, 2025
Reserved Jun 9, 2022
Link CVE-2022-32771

CISA Vulnrichment

Updated Apr 15, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-32771

Red Hat

No data

ENISA EUVD

Assigner talos
Published Aug 22, 2022
Updated Apr 15, 2025
Link EUVD-2022-35837

GitHub

No data