A vulnerability described as problematic has been identified in diskover-community up to 2.3.5. Affected by this vulnerability is an unknown functionality of the file public/view.php. Executing a manipulation of the argument doctype can lead to cross site scripting.
The identification of this vulnerability is CVE-2026-38935. The attack may be launched remotely. There is no exploit available.
