CVE-2026-78281: Codepeople CP Media Player

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.

Affected products

• Codepeople CP Media Player: up to and including 1.3.0

Published 2026-08-27. Last modified 2026-08-28.