CVE-2026-40928 | WWBN AVideo up to 29.0 JSON Endpoint comments_like.json.php cross-site request forgery (GHSA-x2pw-9c38-cp2j)

A vulnerability was found in WWBN AVideo up to 29.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the file objects/comments_like.json.php of the component JSON Endpoint. The manipulation leads to cross-site request forgery.

This vulnerability is documented as CVE-2026-40928. The attack can be initiated remotely. There is not any exploit available.

It is suggested to install a patch to address this issue.