CVE-2026-62039
MEDIUM NVDCVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Oct 09, 2026
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.8.8.