A vulnerability identified as problematic has been detected in Galette up to 1.1.x. This affects an unknown function of the component Document Type Handler. This manipulation causes basic cross site scripting.

This vulnerability is tracked as CVE-2025-48884. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.