2022-08-19 11:52:33
mitre
PUBLISHED
In Jellyfin before 10.8, stored XSS allows theft of an admin access token.