What is GHSA-qpxh-62pf-qh76?

GHSA-qpxh-62pf-qh76 is a security advisory published by GitHub Security Advisories with Medium severity. Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced...

Which CVE IDs does GHSA-qpxh-62pf-qh76 cover?

GHSA-qpxh-62pf-qh76 covers the following CVE IDs: CVE-2026-50235. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qpxh-62pf-qh76?

GHSA-qpxh-62pf-qh76 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-qpxh-62pf-qh76MediumCVSS 6.1

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced...

Vendor

GitHub Security Advisories

Published

June 5, 2026

Last Modified

June 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-50235 →

📋 Description

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScript in users' browsers and steal session information.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-50235
https://www.vulncheck.com/advisories/lyrion-music-server-reflected-xss-via-search-parameters
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5993.php
https://github.com/advisories/GHSA-qpxh-62pf-qh76