← CVE Intelligence

CVE-2026-12580

Digiwin|EasyFlow .NET - Stored Cross-Site Scripting PUBLISHED

Description (CNA)

EasyFlow .NET developed by Digiwin has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.

Affected (CNA)

Vendor / productVersions
Digiwin / EasyFlow .NETaffected 0 through 8.1.4

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.