CVE-2026-50235CWE-79

Lyrion Music Server 9.2.0 Reflected XSS via search Parameters

Medium · published June 5, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScript in users' browsers and steal session information.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00263 · 17.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-06-05T13:24Z
EPSS history
Timeline
  • 05 JUN 13:24Z
    Lyrion Music Server 9.2.0 Reflected XSS via search Parameters
    cvelistv5