A vulnerability was found in coollabsio Coolify up to 4.0.0-beta.420.6. It has been rated as problematic. Impacted is an unknown function of the component Project Creation Workflow. This manipulation causes cross site scripting.
This vulnerability is handled as CVE-2025-34157. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is advised.
