CVE-2025-65229

MEDIUM 4.6CVE-2025-65229 · Published 08/12/2025 · updated 18/10/2026

In short

CVE-2025-65229 is a MEDIUM (CVSS 4.6) vulnerability affecting lyrion music server (lyrion).
Chance of exploitation in the next 30 days (EPSS): 0.17%, higher than 6.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
lyrion music server lyrion	`≤ 9.0.3`	No fix yet

Description

A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output encoding on the Information (Player Info) tab, causing the script to execute in the context of any user viewing that page.

References

iyadalkhatib98/My_CVES
lyrion.org · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free