CVE-2026-33651 | WWBN AVideo up to 26.0 remindMe.json.php getAllActiveOrToRepeat live_schedule_id sql injection

March 23, 2026 Yanac

A vulnerability categorized as critical has been discovered in WWBN AVideo up to 26.0. This impacts the function Scheduler_commands::getAllActiveOrToRepeat of the file remindMe.json.php. Executing a manipulation of the argument live_schedule_id can lead to sql injection.

This vulnerability is registered as CVE-2026-33651. It is possible to launch the attack remotely. No exploit is available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More