An unauthenticated XSS vulnerability in the AVideo YPTSocket plugin allows attackers to execute arbitrary JavaScript in victim browsers via crafted websocket callback messages.
AVideo +3
web-application
xss
injection
web-security
access-control
pii-leak
account-takeover
authentication-bypass
+1
9t
1c
updated