A vulnerability labeled as problematic has been found in horilla-opensource horilla up to 1.4.x. This impacts the function
has_xss. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2026-24037. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.