CVE-2026-61575 | WWBN AVideo-Encoder up to 8.0.x view/queue.php Login::canUpload fileURI cross site scripting

October 29, 2026 Yanac

A vulnerability classified as problematic was found in WWBN AVideo-Encoder up to 8.0.x. Impacted is the function Login::canUpload of the file view/queue.php of the component Encoder. Such manipulation of the argument fileURI leads to cross site scripting.

This vulnerability is documented as CVE-2026-61575. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More