A vulnerability has been found in rymcu forest up to 0.0.5 and classified as problematic. Affected by this issue is the function
XssUtils.replaceHtmlCode of the file src/main/java/com/rymcu/forest/util/XssUtils.java of the component Article Content/Comments/Portfolio. The manipulation leads to cross site scripting.
This vulnerability is referenced as CVE-2026-2946. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
