https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T01:19:11.312884+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-125395 fkie_cve-2026-125395 2026-11-11T01:19:11.314796+00:00

Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics() and show_lyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute code in the browser of any user viewing the lyrics.

 https://db.gcve.eu/vuln/ghsa-8q4f-r7f6-8g49 GHSA-8q4f-r7f6-8g49 2026-11-11T01:19:11.314866+00:00

Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics() and show_lyrics.inc.php. Attackers can upload a song whose lyrics ID3 tag contains HTML and script to execute code in the browser of any user viewing the lyrics.