CVE-2026-55690 | StarCitizenWiki EmbedVideo Extension up to 4.0.x EmbedServiceFactory EmbedServiceFactory.php newFromName cross site scripting

A vulnerability described as problematic has been identified in StarCitizenWiki EmbedVideo Extension up to 4.0.x. Affected by this vulnerability is the function EmbedServiceFactory::newFromName of the file includes/EmbedService/EmbedServiceFactory.php of the component EmbedServiceFactory. Such manipulation of the argument Name leads to cross site scripting.

This vulnerability is referenced as CVE-2026-55690. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More