← Database

CVE-2022-35910

MEDIUM CVSS: 5.4 Published: 2022-08-19 Modified: 2026-06-17

Description

In Jellyfin before 10.8, stored XSS allows theft of an admin access token.

Affected Platforms

Jellyfin Jellyfin

Weakness Type

CWE-79

References