CVE-2026-50235

Name of the Vulnerable Software and Affected Versions Lyrion Music Server version 9.2.0

Description A reflected cross-site scripting issue exists in advanced search parameters that do not properly sanitize user input before it is displayed in search forms. This allows attackers to inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScript in the browsers of users, potentially leading to the theft of session information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.