CVE-2025-1076 | Holded Application Activities name/icon cross site scripting

A vulnerability was found in Holded Application. It has been declared as problematic. This vulnerability affects the function Activities. The manipulation of the argument name/icon leads to cross site scripting.

This vulnerability was named CVE-2025-1076. The attack can be initiated remotely. There is no exploit available.