Product
WWBN AVideo versions 12.4 through 29.7.1 contain a path traversal vulnerability in the ADs plugin that allows authenticated attackers to delete arbitrary files on the server.