CVE-2026-34396

Packagist/wwbn/avideo CVE-2026-34396: medium 6.1

AVideo has Stored XSS via Unescaped Plugin Configuration Values in Admin Panel

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-v4h7-3x43-qqw4
• https://github.com/WWBN/AVideo/security/advisories/GHSA-v4h7-3x43-qqw4
• https://nvd.nist.gov/vuln/detail/CVE-2026-34396
• https://github.com/WWBN/AVideo/commit/a93ba83eb9f3aa47cd16af0a0dc13da3bf8ac4d1
• https://github.com/WWBN/AVideo

CVE-2026-34396 · published 2026-03-31T23:22:21Z · modified 2026-03-31T23:41:23.506308Z · JSON