CVE-2026-43878:詳細資料

CVE-2026-43878

6.1
/
中危
0.02%V4
2026-05-11
22h22 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-26
18h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/Meet/iframe.php echoes the attacker-controlled user and pass query parameters unescaped into a JavaScript double-quoted string literal inside a

參考資料