A vulnerability classified as problematic was found in parse-community parse-server up to 8.6.40/9.6.0-alpha.14. Affected by this issue is some unknown functionality of the component File Extension Handler. Such manipulation leads to cross site scripting.
This vulnerability is listed as CVE-2026-32728. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
