volotat vulnerabilities

Products

• anagnorisis 3

Latest volotat CVEs

Newest publication first

1. CVE-2026-97233 volotat Anagnorisis Media Filename PlaylistManager.js html cross site scripting

   Published 2026-09-24

   Medium·CVSS 5.1 EPSS 0.19%

   A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component Media Filename Handler. Such manipulation of the argument file_path leads to cross site scripting. The attack can be lau...

2. CVE-2026-97232 volotat Anagnorisis page.html start_streaming path traversal

   Published 2026-09-24

   Medium·CVSS 5.3 EPSS 0.34%

   A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function get_file_content/save_file_content/move_files/start_streaming of the file page.html. This manipulation causes path traversal. The attack can be initiated remotely. Th...

3. CVE-2026-97231 volotat Anagnorisis Socket.IO Connect app.py missing authentication

   Published 2026-09-24

   Medium·CVSS 6.9 EPSS 0.38%

   A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has b...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.