CVE-2026-88867 | WWBN AVideo Category categoryAddNew.json.php Category::setName name/iconClass cross site scripting

September 10, 2026 Yanac

A vulnerability categorized as problematic has been discovered in WWBN AVideo. This issue affects the function Category::setName of the file objects/categoryAddNew.json.php of the component Category. Such manipulation of the argument name/iconClass leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-88867. The attack can be launched remotely. No exploit exists.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More