CVE-2023-30842: AVideo contains Command injection when embedding a video link

Severity: Critical

CVSS Score: 9.6

AVideo is an open-source video platform. Prior to version 12.4, AVideo is vulnerable to remote code execution when an attacker embeds a malicious video link. This issue is fixed in version 12.4.