Regional Parliament of Castile-La Mancha CVE Debriefs

Regional Parliament of Castile-La Mancha CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Regional Parliament of Castile-La Mancha CVE published 2026-10-26

CVE-2026-103377

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. This vulnerability allows an attacker to execute arbitrary JavaScript code in the browser of a victim who interacts with t [truncated]