Packagist/wwbn/avideo CVE-2026-56347: medium 6.1, EPSS 0.26%

AVideo has Stored XSS via Unescaped Menu Item Fields in TopMenu Plugin

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-gmpc-fxg2-vcmq
• https://github.com/WWBN/AVideo/security/advisories/GHSA-gmpc-fxg2-vcmq
• https://github.com/WWBN/AVideo

CVE-2026-56347 · published 2026-04-01T23:25:11Z · modified 2026-07-08T08:11:48.143520462Z · JSON