Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-103377

Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with the content crafted for the attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Regional Parliament of Castile-La Mancha Video library of the Regional Parliament of Castile-La Mancha

Default version status: unaffected

  • 0 to < October 2026affected

References