medium6.1
CVE-2019-8939
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.
Impact
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tautulli | Tautulli | Version 2.1.26 |