Skip to content
OpenAdvisories

Vendor

epoupon

1 known vulnerabilities.

Products

lms 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-48559

    Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tags

    Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding malicious HTML in media file metadata tags such as GENRE, ARTIST, or ALBUM. Attackers can intr…

    epoupon lms