Cross site scripting

2023-06-2820:15:00

PRIOn knowledge base

www.prio-n.com

emby server

xss

get request

0.001 Low

EPSS

Percentile

26.3%

Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.

CPENameOperatorVersion
embylt4.6.0.50

CPE	Name	Operator	Version
	emby	lt	4.6.0.50

References

github.com/MediaBrowser/Emby/issues/3785

0.001 Low

EPSS

Percentile

26.3%

Related for PRION:CVE-2021-25828