A vulnerability categorized as problematic has been discovered in Galette up to 1.1.x. The impacted element is an unknown function. The manipulation of the argument group name results in improper neutralization of alternate xss syntax.
This vulnerability is identified as CVE-2025-48076. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
