A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library.
CVSS 4.0MEDIUM 5.1·Network·No auth·User interaction·EPSS 0.00408·Published 2026-10-26·Fixed in October 2026CWE-79