A vulnerability labeled as problematic has been found in parisneo lollms up to 2.1.x. This issue affects the function
create_post of the file backend/routers/social/__init__.py. Executing a manipulation can lead to cross site scripting.
This vulnerability is registered as CVE-2026-1115. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
