CVE-2022-25642

CVE-2022-25642 affects the Obyte (formerly Byteball) Wallet prior to 3.4.1. The vulnerability arises in the chat/message handling due to insufficient input filtering/escaping of user-submitted data, enabling cross-site scripting that can lead to remote code execution. Affected: Obyte Wallet