A vulnerability was found in Dataease up to 2.10.19. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Static Resource Upload Interface. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-32139. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.