CVE-2026-103377
Medium
Description
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with the content crafted for the attack.
SeverityMedium
CVSS5.1
Exploit probability—
ProductVideo library of the Regional Parliament of Castile-La Mancha
PublishedOct 26, 2026
First seenOct 26, 2026
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- Regional Parliament of Castile-La Mancha Video library of the Regional Parliament of Castile-La ManchaOctober 2026 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Regional Parliament of Castile-La Mancha Video library of the Regional Parliament of Castile-La Mancha | v < October 2026 | October 2026 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.