A vulnerability was found in parisneo lollms up to 2.1.x and classified as problematic. The impacted element is the function
from_dict of the component AppLollmsMessage. Such manipulation of the argument content leads to cross site scripting.
This vulnerability is referenced as CVE-2026-1116. It is possible to launch the attack remotely. No exploit is available.
It is suggested to upgrade the affected component.
