CVE-2022-32771 Scanner

WWBN AVideo is a video hosting and streaming platform used by various websites to provide high-quality video content to their target audience. This platform is popular among media companies and content creators as it offers a range of features to enhance the video viewing experience. With the help of WWBN AVideo, videos can be easily uploaded, managed, and streamed across multiple devices and platforms.

CVE-2022-32771 is a cross-site scripting (XSS) vulnerability that was detected in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. This particular vulnerability occurs due to insufficient sanitization of the "success" parameter, which can lead to arbitrary Javascript execution. The attacker can exploit this vulnerability by manipulating the crafted HTTP request and getting an authenticated user to send it.

This vulnerability can lead to serious consequences, as an attacker can exploit this security loophole to steal sensitive information such as login credentials, personal data, and banking information. They can also use it to launch phishing attacks, compromise the website's security, and manipulate the website's content. The worst part is that this can happen without the website owner's knowledge, and the attack can take place right under their nose.

In conclusion, digital asset protection is a crucial aspect of online security, and it is imperative to stay vigilant and aware of any potential vulnerabilities that may arise. Thanks to the pro features of s4e.io, you can quickly and easily learn about vulnerabilities that may be present in your digital assets, enabling you to take proactive measures to protect them. Let's come together and keep our digital assets secure!

REFERENCES

• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1538