A vulnerability, which was classified as problematic, has been found in Bludit 3.17.2/3.18.0. This impacts an unknown function. The manipulation of the argument tags leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-4420. The attack is possible to be carried out remotely. No exploit exists.