Medium CVSS: 6.1 CVE-2025-22994 O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.