A vulnerability categorized as problematic has been discovered in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.ts of the component MdPreview. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2025-15632. The attack can be executed remotely. Additionally, an exploit exists.
It is advisable to upgrade the affected component.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
