A vulnerability marked as problematic has been reported in Symfony. Affected is an unknown function of the component URL Attribute Handler. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2026-48761. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.