CVE-2026-50745

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A missing sanitisation issue exists in the stats-video.php script. The construction of URLs to this script does not follow best practices, and the output of the Smarty custom helper function url() is neither properly encoded nor sanitised. This allows user-supplied input to be reflected without escaping, leading to Cross-Site Scripting (XSS), where malicious scripts are injected into benign websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.