A vulnerability was found in 1Panel-dev 1Panel up to 1.10.33/2.0.16 on Linux. It has been rated as problematic. This affects an unknown part of the component MdEditor. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-23525. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.