A vulnerability identified as problematic has been detected in Bludit up to 3.20. The impacted element is an unknown function of the component URL Handler. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-41456. The attack may be initiated remotely. There is no available exploit.

To fix this issue, it is recommended to deploy a patch.