[MEDIUM] AVideo: IDOR in uploadPoster.php Allows Any Authenticated User to Overwrite Scheduled Live Stream Posters and Trigger False Socket Notifications

PKSA-6jcq-63hk-b922 CVE-2026-34247 GHSA-g3hj-mf85-679g

Affected package: wwbn/avideo

Affected version: <=26.0

Reported by:
GitHub