CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

EUVD-2022-31111

Malicious code in bioql PyPI...

cn.eova:eova (1.6-beta2), com.github.jackpanz:jackpanz-spring-core (>=1.0.0, <=1.0.14) +2 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.16)

com.ibeetl:beetl MAVEN version 2.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.eova:eova 1.6-beta2 - com.github.jackpanz:jackpanz-spring-core =1.0.0, =2.4.7, =3.0.5 - com.ibeetl:beetl-framework-starter...

CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

CVE-2022-26555

CVE-2022-26555 is a stored XSS vulnerability in the Add a Button function of Eova v1.6.0 . The issue allows an attacker to inject arbitrary JavaScript/HTML via the button name text box, enabling script execution in the victim’s browser. Connected sources (Red Hat, NVD, CVE lists) confirm the same...

CVE-2022-26555: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

Eova 跨站脚本漏洞

Eova is a rapid development platform for the Eova community in China. A security vulnerability exists in Eova v1.6.0 that allows attackers to execute arbitrary web script or HTML via a specially crafted attack payload injected into the button name text box...

PT-2022-17930

Name of the Vulnerable Software and Affected Versions Eova version 1.6.0 Description A stored cross-site scripting issue in the Add a Button function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box. Recommendations For Eova...

Weak password vulnerability in EOVA

EOVA is a simple development platform developed using the JFinal framework. EOVA suffers from a weak password vulnerability that can be exploited by an attacker to log in to the system and obtain sensitive information...