CVE-2026-50745: XSS
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input to be reflected without escaping.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-50745?
The severity of CVE-2026-50745 is rated as medium with a score of 4.7.
What type of vulnerability is CVE-2026-50745?
CVE-2026-50745 is classified as a Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2026-50745?
To fix CVE-2026-50745, ensure that user input is properly encoded and sanitized before being outputted by the stats-video.php script.
What impact does CVE-2026-50745 have?
CVE-2026-50745 allows user-supplied input to be executed in the context of the application, which can lead to unauthorized actions.
What components are affected by CVE-2026-50745?
CVE-2026-50745 specifically affects the stats-video.php script due to improper handling of user inputs.