{"id":8878,"date":"2025-07-24T10:53:00","date_gmt":"2025-07-24T10:53:00","guid":{"rendered":"http:\/\/localhost\/?p=8878"},"modified":"2025-07-24T10:53:00","modified_gmt":"2025-07-24T10:53:00","slug":"cve-2025-53084","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8878","title":{"rendered":"CVE-2025-53084"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nCVE-2025-53084<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-24T15:11:04.747Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-24T15:28:31.965Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nWWBN<\/td>\n<\/tr>\n
Product<\/th>\nAVideo<\/td>\n<\/tr>\n
Version<\/th>\n14.4<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n9.0 (CRITICAL)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:R\/S:C\/C:H\/I:H\/A:H<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA critical cross-site scripting (XSS) vulnerability exists in the videosList page of WWBN AVideo versions 14.4 and dev master commit 8a8954ff. This allows arbitrary JavaScript execution via crafted HTTP requests, potentially exploitable by tricking users into visiting a malicious webpage.<\/td>\n<\/tr>\n
AI Severity<\/th>\nCritical<\/td>\n<\/tr>\n
AI Vendor<\/th>\nWWBN<\/td>\n<\/tr>\n
AI Product<\/th>\nAVideo<\/td>\n<\/tr>\n
AI Version<\/th>\n14.4, dev master commit 8a8954ff<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n