A vulnerability classified as problematic has been found in Dan-in-CA SIP up to 5.2.16. The affected element is an unknown function of the component Program Name Rendering. This manipulation of the argument program causes cross site scripting.

This vulnerability is tracked as CVE-2026-58475. The attack is possible to be carried out remotely. No exploit exists.