3.4.1

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-12	CVE-2023-32073	Command Injection vulnerability in Wwbn Avideo WWBN AVideo is an open source video platform. network low complexity wwbn CWE-77	8.8
2023-05-08	CVE-2023-30860	Cross-site Scripting vulnerability in Wwbn Avideo WWBN AVideo is an open source video platform. network low complexity wwbn CWE-79	5.4
2023-04-28	CVE-2023-30854	OS Command Injection vulnerability in Wwbn Avideo AVideo is an open source video platform. network low complexity wwbn CWE-78	8.8
2023-04-25	CVE-2023-25313	OS Command Injection vulnerability in Wwbn Avideo OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature. network low complexity wwbn CWE-78 critical	9.8
2023-04-25	CVE-2023-25314	Cross-site Scripting vulnerability in Wwbn Avideo Cross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information via the success parameter to /user. network low complexity wwbn CWE-79	6.1