CVE-2026-82396 | Sulu up to 2.6.24/3.0.7 Media Stream Controller MediaStreamController.php inline cross site scripting

A vulnerability classified as problematic has been found in Sulu up to 2.6.24/3.0.7. This affects an unknown part of the file src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php of the component Media Stream Controller. The manipulation of the argument inline leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-82396. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More