A vulnerability was found in funadmin up to 7.1.0-rc4. It has been rated as problematic. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2026-2897. The attack is possible to be carried out remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
