CVE-2019-8939
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.
Published: 2019-02-19 · CVSS: Unscored
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7