A vulnerability classified as problematic was found in milesmcc Shynet up to 0.13.x. Affected is the function urldisplay/iconify of the component Template Filter Handler. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-35508. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.