Packagist/WWBN/AVideo CVE-2026-50182: medium 6.1, EPSS 0.29%

WWBN AVideo: Unauthenticated Reflected XSS via $_GET['search'] in AVideo YouTubeAPI Gallery Pagination

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-hgjh-6wj8-gcgf
• https://github.com/WWBN/AVideo/security/advisories/GHSA-hgjh-6wj8-gcgf
• https://github.com/WWBN/AVideo/commit/f50fc033b7adb36f1ffd6640e7826468bdafdec3
• https://github.com/WWBN/AVideo

CVE-2026-50182 · published 2026-06-04T18:55:58Z · modified 2026-09-10T03:50:49.782169192Z · JSON