Packagist/wwbn/avideo CVE-2026-34739: medium 6.1, EPSS 0.26%
AVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.php
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 26.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jqrj-chh6-8h78
- https://github.com/WWBN/AVideo/security/advisories/GHSA-jqrj-chh6-8h78
- https://nvd.nist.gov/vuln/detail/CVE-2026-34739
- https://github.com/WWBN/AVideo/commit/31e6888e40be89cc2ab27d4cef449f6d8339ffb2
- https://github.com/WWBN/AVideo
CVE-2026-34739 · published · modified · JSON