Live › vulnerability › CVE-2026-103377
Go to dashboardA reflected cross-site scripting flaw exists in the web application of the Castile-La Mancha Regional Parliament's video library. User-supplied input is rendered into the page without sanitisation, so an attacker can run JavaScript in the browser of a victim who opens a crafted link or content.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with the content crafted for the attack.
This page as .md · .json · in your agent: get_signal("CVE-2026-103377")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.