Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

AVideo vulnerabilities

8 published CVEs name AVideo among the affected products.

Published CVEs
8
Last 12 months
8
Critical
1
Known exploited
0

Critical 1High 4Medium 3Low 0Not scored 0

Newest CVEs

  • CVE-2026-60092

    AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel

    AVideo · AVideo

    Medium5.1
  • CVE-2026-56346

    AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint

    AVideo · AVideo

    Medium6.9
  • CVE-2026-56345

    AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint

    AVideo · AVideo

    Critical9.2
  • CVE-2026-56342

    AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

    AVideo · AVideo

    Medium6.1
  • CVE-2026-56341

    AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php

    AVideo · AVideo

    High8.7
  • CVE-2020-37158

    AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

    AVideo · AVideo Platform

    High8.5
  • CVE-2020-37173

    AVideo Platform 8.1 - Information Disclosure (User Enumeration)

    AVideo · AVideo Platform

    High8.7
  • CVE-2020-37172

    AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

    AVideo · AVideo Platform

    High8.5