A vulnerability, which was classified as problematic, has been found in WSO2 API Manager and Identity Server. This issue affects some unknown processing of the component Authentication Endpoint. The manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2025-6024. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
