Log in Start free

AVideo

Products

ProductCVEsExploitedLatest
AVideo5–Jul 8, 2026
AVideo Platform3–Feb 11, 2026

Exploited and recent CVEs

  • CVE-2026-60092 Medium 6.1 AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel 0.3%
  • CVE-2026-56346 Medium 6.5 AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint 0.6%
  • CVE-2026-56345 High 8.1 AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint 0.5%
  • CVE-2026-56342 Medium 6.8 AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter 0.4%
  • CVE-2026-56341 High 7.5 AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php 0.5%
  • CVE-2020-37158 Medium 5.3 AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) 0.3%
  • CVE-2020-37173 High 7.5 AVideo Platform 8.1 - Information Disclosure (User Enumeration) 0.7%
  • CVE-2020-37172 Medium 5.3 AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) 0.8%