Threats affecting pkg:npm/volotat/anagnorisis

CVE-2026-97233 is a cross-site scripting (XSS) vulnerability in volotat Anagnorisis affecting versions 0.4.0 through 0.4.11. The issue exists in the PlaylistManager.js file within the Media Filename Handler component, where improper handling of the file_path argument allows remote attackers to execute script code. The vulnerability has a medium severity score of 5.1 and an exploit is publicly available. The vendor has not responded to disclosure attempts and no patch information is provided.