CVE-2026-12580
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Jun 22, 2026
Vendor
unknown
Description
EasyFlow .NET developed by Digiwin has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.