A vulnerability identified as problematic has been detected in RLE NOVA PlanManager. This affects an unknown function of the file /index.php. The manipulation of the argument comment/brand leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is listed as CVE-2026-1469. The attack may be initiated remotely. There is no available exploit.