A vulnerability was found in LigeroSmart up to 6.1.26 and classified as problematic. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument SortBy leads to cross site scripting.
This vulnerability is traded as CVE-2026-2546. The attack may be launched remotely. Furthermore, there is an exploit available.
The project was informed of the problem early through an issue report but has not responded yet.
