A vulnerability described as problematic has been identified in Budibase up to 3.32.4. Affected is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-35218. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.