end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix." /> CVE-2026-41061 | RedsauceVyhľadávanie CVE | Redsauce end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix.","datePublished":"2026-04-21T23:16:21","inLanguage":"sk","articleSection":"Cybersecurity vulnerabilities","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.redsauce.net/sk/cves/CVE-2026-41061"},"url":"https://www.redsauce.net/sk/cves/CVE-2026-41061","isBasedOn":"https://nvd.nist.gov/vuln/detail/CVE-2026-41061","citation":"https://nvd.nist.gov/vuln/detail/CVE-2026-41061","publisher":{"@type":"Organization","@id":"https://www.redsauce.net/#organization","name":"Redsauce Engineering Services S.L.","url":"https://www.redsauce.net/"},"about":{"@type":"Thing","name":"WWBN AVideo","identifier":"CVE-2026-41061"},"additionalProperty":[{"@type":"PropertyValue","name":"CVSS score","value":5.4,"minValue":0,"maxValue":10},{"@type":"PropertyValue","name":"CVSS vector","value":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"@type":"PropertyValue","name":"EPSS probability","value":0.00173,"minValue":0,"maxValue":1},{"@type":"PropertyValue","name":"Risk score","value":0.55,"minValue":0,"maxValue":100},{"@type":"PropertyValue","name":"Affected product","value":"WWBN AVideo"},{"@type":"PropertyValue","name":"Affected versions","value":"\u003c29.0"},{"@type":"PropertyValue","name":"Vulnerability type","value":"Core software"}]}
WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isValidDuration()` regex at `objects/video.php:918` uses `/^[0-9]{1,2}:[0-9]{1,2}:[0-9]{1,2}/` without a `
end anchor, allowing arbitrary HTML/JavaScript to be appended after a valid duration prefix. The crafted duration is stored in the database and rendered without HTML escaping via `echo Video::getCleanDuration()` on trending pages, playlist pages, and video gallery thumbnails, resulting in stored cross-site scripting. Commit bcba324644df8b4ed1f891462455f1cd26822a45 contains a fix.
