A vulnerability classified as problematic was found in farisc0de Uploady up to 3.1.1. This impacts an unknown function of the component Filename Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-33653. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.