A vulnerability described as problematic has been identified in vaadin and vaadin-spreadsheet-flow up to 7.7.49/8.29.1/23.6.5/24.8.13/24.9.6. This affects an unknown function. Such manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-15022. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
