7.1 High

CVE-2025-31426 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows Reflected XSS.This issue affects Sticky Radio Player: from n/a through <= 3.4.

Affected products and versions

Product	Affected versions	Fixed in
Sticky Radio Player 3.4	earliest → 3.4	No fix stated

The 2 CVEs of Sticky Radio Player →

CVE-2025-31926 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup… 8.5 High

Do you use Sticky Radio Player?

Track this CVE Watch Sticky Radio Player Check my SBOMs

www.cveye.io/en/cve/CVE-2025-31426

Timeline

Published June 9, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-31426 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup…

Description

Affected products and versions

Other CVEs of Sticky Radio Player