A vulnerability was found in FormCms 0.5.5. It has been classified as problematic. This impacts an unknown function of the component Avatar Upload Handler. This manipulation causes cross site scripting.
This vulnerability is handled as CVE-2025-56236. The attack can be initiated remotely. There is not any exploit available.
