A vulnerability has been found in Johnson Controls FM Systems Employee and classified as problematic. Impacted is an unknown function. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-34495. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.