Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-30690

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.524
EPSS Ranking 97.8%
CVSS Severity
CVSS v3 Score 9.6
Products affected by CVE-2022-30690
  • Wwbn » Avideo » Version: 11.6
    cpe:2.3:a:wwbn:avideo:11.6


Products
Pricing
Contact Us

Shodan ® - All rights reserved