TI-2026-35917 CVE-2026-48559 · GHSA-m7jj-hw4m-mc77
Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tags
Priority MEDIUM 56
Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding malicious HTML in media file metadata tags such as GENR…