CVE-2026-97233

Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions prior to 0.4.12

Description Cross site scripting occurs in the Media Filename Handler component due to improper handling of the file path argument within the html() function of the PlaylistManager.js file. This allows a remote attacker to execute malicious scripts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the html() function in the PlaylistManager.js file.