A vulnerability marked as problematic has been reported in Anon Proxy Server 0.104. Impacted is an unknown function of the file /diagconnect.php of the component URL Handler. This manipulation of the argument host causes cross site scripting.

This vulnerability is tracked as CVE-2025-41356. The attack is possible to be carried out remotely. No exploit exists.