CVE-2022-26555

Name of the Vulnerable Software and Affected Versions Eova version 1.6.0

Description A stored cross-site scripting issue in the Add a Button function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box.

Recommendations For Eova version 1.6.0, as a temporary workaround, consider disabling the Add a Button function until a patch is available. Restrict access to the button name text box to minimize the risk of exploitation. Avoid using the button name text box in the affected function until the issue is resolved.