A vulnerability was found in Cybozu Garoon up to 6.0.3 and classified as problematic. The affected element is an unknown function of the component Message Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-22881. It is possible to launch the attack remotely. No exploit is available.