Vulnerability Description
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with the content crafted for the attack.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-103377?
CVE-2026-103377 is a documented vulnerability. A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied conte...
How severe is CVE-2026-103377?
CVSS scoring is not yet available for CVE-2026-103377. Check NVD for updates.
Is there a patch for CVE-2026-103377?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.