A vulnerability labeled as problematic has been found in Kovah LinkAce up to 2.4.2. This affects an unknown part of the file /lists/feed of the component XML CDATA Section Handler. Such manipulation leads to basic cross site scripting.
This vulnerability is traded as CVE-2026-27458. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
