Product
CVE-2026-54864 describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in Post Video Players versions 1.165 and earlier.