CVE-2026-1630 | WEBCON BPS prior 2025.2.1.293/2026.1.3.109 URL /openinmobileapp cross site scripting

A vulnerability was found in WEBCON BPS. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /openinmobileapp of the component URL Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-1630. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.