EIP-2026-102220

This is a detailed vulnerability writeup describing a persistent XSS vulnerability in the C & C++ for OS iOS application. The vulnerability allows script code injection via email or QR code sharing due to insufficient input validation and encoding.