A vulnerability, which was classified as problematic, was found in sakaiproject sakai up to 23.4/25.1. This issue affects some unknown processing of the component Description Handler. Executing a manipulation can lead to cross site scripting.
This vulnerability appears as CVE-2026-33402. The attack may be performed from remote. There is no available exploit.
You should upgrade the affected component.