A vulnerability classified as problematic was found in Wagtail up to 6.3.7/7.0.5/7.2.2/7.3.0. This affects an unknown function. Executing a manipulation can lead to cross site scripting.
This vulnerability appears as CVE-2026-28222. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
