← Database

CVE-2022-27462

MEDIUM CVSS: 6.1 Published: 2022-04-05 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php.

Affected Platforms

Wwbn Avideo

Weakness Type

CWE-79

References