CVE-2026-50235EPSS p16.5%

CVE-2026-50235CVE-2026-50235

Description

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScript in users' browsers and steal session information.

Scoring

CVSS 6.1 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS0.26% probability of exploitation · percentile 16.5% · 2026-10-05T12:00:23Z
Last modified2026-06-05

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-50230
CVE
CVE-2026-50231
CVE
CVE-2026-50232
CVE
CVE-2026-50234
CVE
CVE-2026-50233
CVE
CVE-2026-48559
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.