A vulnerability has been found in LigeroSmart up to 6.1.26 and classified as problematic. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketSearch. This manipulation of the argument Profile causes cross site scripting.

This vulnerability appears as CVE-2026-2545. The attack may be initiated remotely. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.