https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:49:19.439556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-77615 CVE-2026-77615 — Paella Player: Stored XSS via caption cue text 2026-10-05T15:49:19.440496+00:00

Affected: opencast, polimediaupv paella-player

Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11.