CVE-2026-109558

Versions 1.6.0 through 1.112.0 of EdgeEver are vulnerable to a stored cross-site scripting (XSS) vulnerability in the TemplatesPane.tsx component. The root cause is the rendering of template contentMarkdown as raw HTML using dangerouslySetInnerHTML without proper sanitization. An attacker can uti...