A vulnerability described as problematic has been identified in WWBN AVideo up to 26.0. This affects the function xss_esc of the component Registered User Handler. Such manipulation of the argument About leads to cross site scripting.

This vulnerability is traded as CVE-2026-33683. The attack may be launched remotely. There is no exploit available.

It is best practice to apply a patch to resolve this issue.