A vulnerability has been found in NocoDB up to 0.301.2 and classified as problematic. The impacted element is an unknown function. This manipulation causes cross site scripting.
This vulnerability is handled as CVE-2026-28357. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
