A vulnerability has been found in technical-laohu mpay up to 1.2.4 and classified as problematic. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting.
This vulnerability appears as CVE-2026-1151. The attack may be initiated remotely. In addition, an exploit is available.
