A vulnerability, which was classified as problematic, was found in Eventobot. This impacts an unknown function of the file /search-results. Such manipulation of the argument Name leads to cross site scripting.
This vulnerability is referenced as CVE-2025-40638. It is possible to launch the attack remotely. No exploit is available.
