{"action":"Upgrade wwbn/avideo to 12.4 or later.","affected":[{"fixed":"12.4","introduced":"0"}],"component":"wwbn/avideo","cve_ids":["CVE-2023-30860"],"ecosystem":"Packagist","epss":0.00706,"exploited":false,"fixed_versions":["12.4"],"ghsa_id":"GHSA-xr9h-p2rc-rpqm","id":"tcs_01M5KFB9RW2X3A9GW2MSND8RJ9","modified_at":"2024-02-16T08:11:21.848104Z","published_at":"2023-05-01T22:30:28Z","references":["https://osv.dev/vulnerability/GHSA-xr9h-p2rc-rpqm","https://github.com/WWBN/AVideo/security/advisories/GHSA-xr9h-p2rc-rpqm","https://nvd.nist.gov/vuln/detail/CVE-2023-30860","https://github.com/WWBN/AVideo","https://youtu.be/Nke0Bmv5F-o"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-xr9h-p2rc-rpqm","url":"https://osv.dev/vulnerability/GHSA-xr9h-p2rc-rpqm"}],"summary":"WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account"}