CVE-2026-33485 | WWBN AVideo up to 26.0 on_publish.php keyExists Name sql injection

A vulnerability identified as critical has been detected in WWBN AVideo up to 26.0. Affected by this issue is the function LiveTransmitionHistory::getLatest/LiveTransmition::keyExists of the file plugin/Live/on_publish.php. The manipulation of the argument Name leads to sql injection.

This vulnerability is traded as CVE-2026-33485. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to install a patch to address this issue.