Packagist/wwbn/avideo CVE-2024-34899: medium 6.1, EPSS 0.46%

AVideo cross-site scripting vulnerability in the view/about.php page

Action: Upgrade wwbn/avideo to 14.3 or later.

composer require wwbn/avideo:14.3

Affected

Fixed versions

Sources

• osv: GHSA-f98p-2hc5-fm7v
• https://github.com/WWBN/AVideo/security/advisories/GHSA-f98p-2hc5-fm7v
• https://nvd.nist.gov/vuln/detail/CVE-2024-34899
• https://github.com/WWBN/AVideo/commit/345711562621d879e63a817d01a229bf0aae7a1d
• https://github.com/WWBN/AVideo
• https://hackerdna.com/courses/cve/cve-2024-34899

CVE-2024-34899 · published 2024-05-20T18:43:57Z · modified 2024-05-20T19:11:53.708123Z · JSON