https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T11:44:24.321791+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-28853 CVE-2024-28853 — Ampache Stored XSS 2026-10-16T11:44:24.344264+00:00

Affected: ampache

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting (XSS) vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of /preferences.php?action=admin_update_preferences. This vulnerability is fixed in 6.3.1.