CVE-2022-26555

CVE-2022-26555 is a stored XSS vulnerability in the Add a Button function of Eova v1.6.0 . The issue allows an attacker to inject arbitrary JavaScript/HTML via the button name text box, enabling script execution in the victim’s browser. Connected sources (Red Hat, NVD, CVE lists) confirm the same...