CVE-2022-32770 Scanner
Detects 'Cross-Site Scripting (XSS)' vulnerability in WWBN AVideo affects v. 11.6 and dev master commit 3f7c0364.
Used 3.5k times · 3.4k assets checked · url
CVE
CVE-2022-32770
6.1
CVSScritical
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.This vulnerability arrises from the "toast" parameter which is inserted into the document with insufficient sanitization.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
avideo
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: avideo
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →