Avideo vulnerabilities

Products

• Avideo 5
• Platform 3

Newest

• avideo AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel CVE-2026-60092 5.1 MediumJune 23, 2026
• avideo AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter CVE-2026-56342 6.1 MediumJune 20, 2026
• avideo AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint CVE-2026-56345 9.2 CriticalMay 15, 2026
• avideo AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php CVE-2026-56341 8.7 HighMarch 29, 2026
• avideo AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint CVE-2026-56346 6.9 MediumMarch 19, 2026
• avideo platform, wwbn avideo +1 more AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) CVE-2020-37158 8.5 HighFebruary 11, 2026
• avideo platform, wwbn avideo +1 more AVideo Platform 8.1 - Information Disclosure (User Enumeration) CVE-2020-37173 8.7 HighFebruary 11, 2026
• avideo platform, wwbn avideo +1 more AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) CVE-2020-37172 8.5 HighFebruary 11, 2026