Vulnerability CVE-2023-30842
Published: 2023-04-25   Modified: 2023-04-26

Description:
AVideo is an open-source video platform. Prior to version 12.4, AVideo is vulnerable to remote code execution when an attacker embeds a malicious video link. This issue is fixed in version 12.4.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://github.com/WWBN/AVideo/commit/236228f15a9a31be5a0e60f05dac043682e49a5e
https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw
Copyright 2026, cxsecurity.com

 

Back to Top