CVE-2023-25313

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p69

Published

Apr 25, 2023 (Apr 25, 2023)

Modified

Jun 17, 2026

Description

OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature.

Vendors: wwbn
Products: avideo
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.