CVE-2026-103377 Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-103377?
CVE-2026-103377 is a medium-severity vulnerability in Video library of the Regional Parliament of Castile-La Mancha, published on 26 Oct 2026.
Official description
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with the content crafted for the attack.
Weakness: CWE-79
Which versions are affected by CVE-2026-103377?
How do I fix CVE-2026-103377?
No fix has been published for CVE-2026-103377 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-103377 being exploited?
There is no known exploitation of CVE-2026-103377 in the wild and no public exploit code.
Sources
Also known as GHSA-j342-hpfm-cfjv.