Reflected Cross-Site Scripting Vulnerability in Castile-La Mancha Regional Parliament's Video Library

CVE-2026-103377

What is CVE-2026-103377?

A reflected Cross-Site Scripting vulnerability exists in the web application of the Castile-La Mancha Regional Parliament’s video library. This flaw allows an attacker to inject malicious scripts into web pages viewed by users. The application fails to properly sanitize user inputs before displaying them, enabling attackers to craft links that, when clicked, execute arbitrary JavaScript in the affected user's browser. This can lead to unauthorized actions, data theft, or session hijacking for users interacting with the compromised content.

References