A vulnerability was found in haxtheweb haxcms-nodejs and haxcms-php up to 26.0.0 and classified as problematic. This affects an unknown function of the file /system/api/saveNode of the component Attribute Name Handler. Executing a manipulation can lead to cross site scripting.
This vulnerability is registered as CVE-2026-48527. It is possible to launch the attack remotely. No exploit is available.
It is suggested to upgrade the affected component.
