Security Advisory
CVE-2026-85577
5.4
MEDIUM
Vulnerability Description
AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attackers to inject arbitrary JavaScript by closing the script tag with . Attackers can craft a malicious URL with an error parameter containing script breakout sequences to execute arbitrary JavaScript in the victim's browser context on the login page.
Published Date
September 4, 2026
Official Source
NIST NVD Advisory