← All advisories

Medium severity6.1OSV Advisory· Published Feb 19, 2019· Updated Jun 17, 2026

CVE-2019-8939

CVE-2019-8939

Description

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Tautulli/Tautulli3 versions
cpe:2.3:a:tautulli:tautulli:2.1.26:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tautulli:tautulli:2.1.26:*:*:*:*:*:*:*
- (no CPE)range: v1.0, v1.1.0, v1.1.1, …
- (no CPE)range: 2.1.26

Patches

Vulnerability mechanics

References

2

github.com/Tautulli/Tautulli-Issues/issues/161nvdExploitPatchThird Party Advisory
www.securityfocus.com/bid/107171nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.