[MEDIUM] WWBN AVideo is missing CSRF protection in objects/commentDelete.json.php enables mass comment deletion against moderators and content creators

PKSA-8nj2-vhcz-7bc5 GHSA-8qm8-g55h-xmqr

Affected package: wwbn/avideo

Affected version: <=29.0

Reported by:
GitHub