CVE-2026-38466 in GazellePWinformação

Sumário

de MITRE • 26/08/2026

A Stored XSS vulnerability in the torrent remaster custom title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the remaster_custom_title parameter, which is stored during torrent upload or edit and later rendered in torrent title output.

Once again VulDB remains the best source for vulnerability data.

Responsável

MITRE

Reservar

06/04/2026

Divulgação

26/08/2026

Moderação

aceite

Entrada

VDB-395365

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

muito baixo

Fontes

Want to stay up to date on a daily basis?

Enable the mail alert feature now!