Skip to content
OpenAdvisories

Vendor

LMS Community

6 known vulnerabilities.

Products

Lyrion Music Server 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-50235

    Lyrion Music Server 9.2.0 Reflected XSS via search Parameters

    Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search pa…

    LMS Community Lyrion Music Server
  • Medium 5.3
    CVE-2026-50233

    Lyrion Music Server 9.2.0 Arbitrary Directory Listing

    Lyrion Music Server 9.2.0 contains an arbitrary directory listing vulnerability in its readdirectory query, exposed through both the CLI service (TCP port 9090) and the HTTP JSON-RPC endpoint (/jsonrpc.js). The query accepts a folder parameter and lists its c…

    LMS Community Lyrion Music Server
  • Medium 6.1
    CVE-2026-50230 Scanner template

    Lyrion Music Server 9.2.0 Reflected XSS via server.log

    Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs w…

    LMS Community Lyrion Music Server