{"schema":"threatline.record/2","record":{"id":"CVE-2026-103377","aliases":[],"summary":"Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha","details":"A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with the content crafted for the attack.","categories":["Unclassified"],"product":"Video library of the Regional Parliament of Castile-La Mancha","vendor":"Regional Parliament of Castile-La Mancha","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103377","source_modified_at":"2026-10-26T09:29:50.749Z","fetched_at":"2026-10-26T12:48:13.248886Z","product":"Video library of the Regional Parliament of Castile-La Mancha","vendor":"Regional Parliament of Castile-La Mancha","versions":[{"status":"affected","version":"0","lessThan":"October 2026","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":5.1,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T09:29:50.749Z","modified_at":"2026-10-26T09:29:50.749Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-103377","fetched_at":"2026-10-26T12:48:13.248886Z","source_modified_at":"2026-10-26T09:29:50.749Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-video-library-regional-parliament-castile"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T09:29:50.749Z","content_hash":"5dbdf127762bd11c25827e500b6ec706fdfc2744e1d6ec4e98a09f724d5ecef1"}}