CVE-2019-8939

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.

Date published : 2019-02-19

http://www.securityfocus.com/bid/107171

https://github.com/Tautulli/Tautulli-Issues/issues/161