CVE-2025-62613 Scanner
CVE-2025-62613 Scanner - Cross-Site Scripting (XSS) vulnerability in VDO.Ninja
Used 2.5k times · 5.9k assets checked · url
CVE
CVE-2025-62613
6.9
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC. From versions 28.0 to before 28.4, a reflected Cross-Site Scripting (XSS) vulnerability exists on examples/control.html through the room parameter, which is improperly sanitized before being rendered in the DOM. The application fails to validate and encode user input, allowing malicious scripts to be injected and executed. This issue has been patched in version 28.4.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
vdo.ninja
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: vdo.ninja
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →