Threats affecting pkg:github/ampache/ampache

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-125395ampache · Cross-site Scripting Medium5.12026-11-09CVE Database V5CVE-2026-125395 Ampache versions prior to 8.4.0 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with upload permissions to inject malicious scripts via unescaped song lyrics in specific PHP files. The vulnerability is fixed in version 8.4.0. Vulnerability	CVE Database V5	2026-11-09

Page 1 of 1