GHSA-qvwg-c35p-rqhj: Duplicate Advisory: AVideo cross-site scripting vulnerability in the view/about.php page

The provided information indicates the XSS vulnerability occurs in view/about.php line 53 where the User-Agent header is echoed without sanitization. However, PHP's echo statement in the global scope does not correspond to a named function in runtime profiling. The vulnerability stems from direct output in the script rather than within a specific function. Without access to the actual code structure or patch details showing function-level changes, we cannot definitively identify a named function that would appear in a profiler. The main script execution context ('{main}') isn't a valid function name, and no class/method information is provided in the advisory.