A vulnerability categorized as problematic has been discovered in ACDH-CH OpenAtlas 8.9.0. The affected element is an unknown function of the file /insert/file. Executing manipulation of the argument creator/license_holder can lead to cross site scripting.
This vulnerability is registered as CVE-2025-40702. It is possible to launch the attack remotely. No exploit is available.
