A vulnerability has been found in PHPEMS 11.0 and classified as problematic. The affected element is an unknown function of the file /index.php?ask=app-ask. Performing a manipulation of the argument askcontent results in cross site scripting.
This vulnerability is reported as CVE-2026-3946. The attack is possible to be carried out remotely. Moreover, an exploit is present.
