CVE-2026-115541 | Community Edition up to 1.18.6/1.19.0 Friendship Confirmation Dialog jQuery.html cross site scripting

A vulnerability has been found in Community Edition up to 1.18.6/1.19.0 and classified as problematic. This affects the function jQuery.html of the component Friendship Confirmation Dialog. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-115541. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More