A vulnerability classified as problematic was found in WWBN AVideo up to 26.0. This impacts an unknown function of the file objects/pluginImport.json.php of the component ZIP File Parser. The manipulation results in cross-site request forgery.
This vulnerability was named CVE-2026-33507. The attack may be performed from remote. There is no available exploit.
It is advisable to implement a patch to correct this issue.
