https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 06:35:16 +0000 https://cve.radiocsirt.org/vuln/cve-2026-33479 <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Gallery plugin&#39;s `saveSort.json.php` endpoint passes unsanitized user input from `$_REQUEST[&#39;sections&#39;]` array values directly into PHP&#39;s `eval()` function. While the endpoint is gated behind `User::isAdmin()`, it has no CSRF token validation. Combined with AVideo&#39;s explicit `SameSite=None` session cookie configuration, an attacker can exploit this via cross-site request forgery to achieve unauthenticated remote code execution — requiring only that an admin visits an attacker-controlled page. Commit 087dab8841f8bdb54be184105ef19b47c5698fcb contains a patch.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Gallery plugin&#39;s `saveSort.json.php` endpoint passes unsanitized user input from `$_REQUEST[&#39;sections&#39;]` array values directly into PHP&#39;s `eval()` function. While the endpoint is gated behind `User::isAdmin()`, it has no CSRF token validation. Combined with AVideo&#39;s explicit `SameSite=None` session cookie configuration, an attacker can exploit this via cross-site request forgery to achieve unauthenticated remote code execution — requiring only that an admin visits an attacker-controlled page. Commit 087dab8841f8bdb54be184105ef19b47c5698fcb contains a patch.</p> https://cve.radiocsirt.org/vuln/cve-2026-33479