https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 18:29:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45580 <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin&#39;s &#34;YouTube-style&#34; view renders the live transmission&#39;s stream key into an HTML class attribute by raw echo, without htmlspecialchars(). A canStream user can persist a key containing &#34; plus an event handler via plugin/Live/saveLive.php, and any visitor (logged in or anonymous) opening the stream&#39;s live page executes attacker JavaScript in the platform origin.</p> <p><strong>Affected:</strong> WWBN AVideo</p> <p>WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin&#39;s &#34;YouTube-style&#34; view renders the live transmission&#39;s stream key into an HTML class attribute by raw echo, without htmlspecialchars(). A canStream user can persist a key containing &#34; plus an event handler via plugin/Live/saveLive.php, and any visitor (logged in or anonymous) opening the stream&#39;s live page executes attacker JavaScript in the platform origin.</p> https://cve.radiocsirt.org/vuln/cve-2026-45580