A vulnerability classified as problematic was found in Pegasystems Pega Infinity up to 24.2.2. This affects an unknown function of the component User Interface. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-8681. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.