CVE-2022-27462: Wwbn Avideo

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php.

Affected products

• Wwbn Avideo: up to and including 11.6

Published 2022-04-05. Last modified 2026-06-17.