[MEDIUM] AVideo: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute

PKSA-wfgs-zzz2-wqdc CVE-2026-45580 GHSA-m5j4-7r85-2cj2

Affected package: wwbn/avideo

Affected version: <=29.0

Reported by:
GitHub