| Package | Affected versions | Patched versions |
|---|---|---|
| wwbn/avideo | < 14.3 | 14.3 |
| avideo | ≥ 10.4, ≤ 12.4 |
The PHP file view/about.php is vulnerable to an XSS issue due to no sanitization of the user agent.
At line [53], the website gets the user-agent from the headers through $_SERVER['HTTP_USER_AGENT'] and echo it without any sanitization.
In PHP, echo a user generated statement, here the User-Agent Header, without any sanitization allows an attacker to inject malicious scripts into the output of a web page, which are then executed in the browser of anyone viewing that page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free