CVE-2023-30854

PoC —

CVSS 3.1

8.8 high

EPSS

5%p92

Published

Apr 28, 2023 (Apr 28, 2023)

Modified

Jun 17, 2026

Description

AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.

Vendors: wwbn
Products: avideo
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.2%)

In the news0 stories

No ingested article mentions this CVE yet.