Skip to content
Threat Feed
Subscribe

Product

AVideo (YPTSocket Plugin Enabled)

1 brief RSS
high advisory

Cross-Site Scripting Vulnerability in AVideo YPTSocket Plugin

An unauthenticated XSS vulnerability in the AVideo YPTSocket plugin allows attackers to execute arbitrary JavaScript in victim browsers via crafted websocket callback messages.

AVideo web-application xss injection
2t 1c