CVE-2026-61573 | WWBN AVideo-Encoder up to 8.0.x Anonymous Login Interface objects/Streamer.php Streamer::getStreamerURL webSiteRootURL cross site scripting

October 29, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in WWBN AVideo-Encoder up to 8.0.x. The affected element is the function Streamer::getStreamerURL of the file objects/Streamer.php of the component Anonymous Login Interface. Performing a manipulation of the argument webSiteRootURL results in cross site scripting.

This vulnerability is reported as CVE-2026-61573. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More