A vulnerability was found in zauberzeug NiceGUI up to 3.7.x. It has been declared as problematic. This issue affects some unknown processing of the component API. Executing a manipulation can lead to cross site scripting.
This vulnerability is handled as CVE-2026-27156. The attack can be executed remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
