A vulnerability was found in Craft CMS up to 4.10.0/5.5.1. It has been declared as problematic. This affects an unknown function of the component Store Management Section. The manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2026-25522. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
