A vulnerability was found in WWBN AVideo up to 25.x. It has been declared as problematic. This affects an unknown function. The manipulation of the argument clean_title results in cross site scripting.
This vulnerability is known as CVE-2026-33295. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.