CVE-2026-38466

CVE-2026-38466 is a Stored XSS in GazellePW (GazellePosterWall) at commit 86c4bedf. The remaster_custom_title parameter is stored during torrent upload or edit and later rendered unsanitized in torrent title output, allowing remote authenticated users to inject arbitrary JavaScript. The vulnerabi...